CVE-2021-36179 | THREATINT

Assigner	fortinet
Reserved	2021-07-06
Published	2021-09-08
Updated	2024-10-25

Description

A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute unauthorized code or commands via crafted parameters in CLI command execution

HIGH: 8.0

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X

Product status

FortiWeb 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0

affected

References

https://fortiguard.com/advisory/FG-IR-20-206

cve.org CVE-2021-36179

nvd.nist.gov CVE-2021-36179

Download JSON

https://cve.threatint.com/CVE/CVE-2021-36179

Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.