Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2021-36193

Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiFone

Default version status: unaffected

  • 3.0.0 to ≤ 3.0.11affected

Fortinet FortiADC

Default version status: unaffected

  • 7.0.0affected
  • 6.2.0 to ≤ 6.2.2affected
  • 6.1.0 to ≤ 6.1.6affected
  • 6.0.0 to ≤ 6.0.4affected
  • 5.4.0 to ≤ 5.4.5affected
  • 5.3.0 to ≤ 5.3.7affected
  • 5.2.0 to ≤ 5.2.8affected
  • 5.1.0 to ≤ 5.1.7affected
  • 5.0.0 to ≤ 5.0.4affected

Fortinet FortiMail

Default version status: unaffected

  • 7.0.0 to ≤ 7.0.2affected
  • 6.4.0 to ≤ 6.4.6affected
  • 6.2.0 to ≤ 6.2.8affected
  • 6.0.0 to ≤ 6.0.12affected
  • 5.4.0 to ≤ 5.4.12affected

Fortinet FortiDDoS

Default version status: unaffected

  • 5.7.0affected
  • 5.6.0 to ≤ 5.6.1affected
  • 5.5.0 to ≤ 5.5.1affected
  • 5.4.0 to ≤ 5.4.3affected
  • 5.3.0 to ≤ 5.3.2affected
  • 5.2.0affected
  • 5.1.0affected
  • 5.0.0affected
  • 4.7.0affected
  • 4.6.0affected
  • 4.5.0affected
  • 4.4.0 to ≤ 4.4.2affected

Fortinet FortiDDoS-F

Default version status: unaffected

  • 6.3.0affected
  • 6.2.0 to ≤ 6.2.2affected
  • 6.1.0 to ≤ 6.1.4affected

Fortinet FortiVoice

Default version status: unaffected

  • 6.4.0 to ≤ 6.4.4affected
  • 6.0.0 to ≤ 6.0.10affected

Fortinet FortiDDoS-CM

Default version status: unaffected

  • 5.5.0 to ≤ 5.5.1affected
  • 5.4.0 to ≤ 5.4.3affected
  • 5.3.0 to ≤ 5.3.1affected
  • 5.2.0affected
  • 5.1.0affected
  • 5.0.0affected
  • 4.7.0affected

Fortinet FortiWeb

Default version status: unaffected

  • 6.4.0 to ≤ 6.4.1affected
  • 6.3.0 to ≤ 6.3.15affected

Fortinet FortiRecorder

Default version status: unaffected

  • 6.4.0 to ≤ 6.4.2affected
  • 6.0.0 to ≤ 6.0.10affected
  • 2.7.0 to ≤ 2.7.7affected
  • 2.6.0 to ≤ 2.6.3affected

Fortinet FortiNDR

Default version status: unaffected

  • 1.5.0 to ≤ 1.5.3affected
  • 1.4.0affected
  • 1.3.0 to ≤ 1.3.1affected
  • 1.2.0affected
  • 1.1.0affected

References