CVE-2021-44170

MEDIUM

6.7

Descripcion

A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments.

Detalles CVE

Puntuacion CVSS v3.16.7

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosHIGH

Interaccion usuarioNONE

Publicado7/18/2022

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

fortinet:fortiosfortinet:fortiproxy

Debilidades (CWE)

CWE-787

Referencias

https://fortiguard.com/psirt/FG-IR-21-179(psirt@fortinet.com)

https://fortiguard.com/psirt/FG-IR-21-179(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.