PatchTheCVEmpvpn firmware vulnerabilities and fixes
Recent CVEs affecting mpvpn firmware, with upgrade or downgrade steps. 6 tracked.
Also searched as: mpvpnfirmware.
mpvpn firmware has 6 tracked vulnerabilities, 2 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 1. Most recent: 2021-12-15. Highest priority: CVE-2021-27860 (score 97/100).
- CVE-2021-27860 CRITICAL 9.8 EXPLOITED MITIGATE MITIGATE FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit
- CVE-2021-27859 HIGH 8.8 MITIGATE MITIGATE A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN softwa
- CVE-2021-27858 MEDIUM 5.3 MITIGATE MITIGATE A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN softwa
- CVE-2021-27857 HIGH 7.5 MITIGATE MITIGATE A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN softwa
- CVE-2021-27856 CRITICAL 9.8 MITIGATE MITIGATE FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named
- CVE-2021-27855 HIGH 8.8 MITIGATE MITIGATE FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenti
FAQ
How do I fix mpvpn firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mpvpn firmware being exploited right now?
Yes: 1 mpvpn firmware CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which mpvpn firmware CVE should I patch first?
CVE-2021-27860 currently ranks highest (97/100): FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit.