CVE-2021-27856

CRITICALNuclei

FatPipe software administrative account with no password

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-27856 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administrative privileges and no password. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA002.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · May 5, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

4
ProductSourceVersion range

IPVPN

Browse FatPipe / IPVPN
CVE List10.1 to < 10.1.2r60p91affected
10.2 to < 10.2.2r42affected

MPVPN

Browse FatPipe / MPVPN
CVE List10.1 to < 10.1.2r60p91affected
10.2 to < 10.2.2r42affected

WARP

Browse FatPipe / WARP
CVE List10.1 to < 10.1.2r60p91affected
10.2 to < 10.2.2r42affected

ipvpn_firmware

Browse FatPipe / ipvpn_firmware
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALFatPipe WARP/IPVPN/MPVPN - Backdoor AccountCVSS 9.8

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 contain an account named "cmuser" with administrative privileges and no password, letting attackers gain unauthorized admin access, exploit requires no authentication.

Impact

Unauthenticated attackers can gain unauthorized administrative access via a backdoor account with no password, leading to complete device compromise.

Remediation

Upgrade to FatPipe WARP/IPVPN/MPVPN version 10.1.2r60p91 or 10.2.2r42 or later.

Authorsgy741
Template tagscvecve2021fatpipedefault-loginbackdoorauth-bypassvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:o:fatpipeinc:warp_firmware:*:*:*:*:*:*:*:*
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5684.php https://www.fatpipeinc.com/support/advisories.php https://www.fatpipeinc.com/support/cve-list.php https://www.zeroscience.mk/codes/fatpipe_backdoor.txt

Source: ProjectDiscovery

References

4