Medium · 4.3 CVE-2021-24018 EUVD-2021-10938GHSA-q8x9-vj32-mh5w

A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacen…

Published Aug 4, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiOS Category: Network devices

Description

A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute arbitrary code via a specifically crafted firmware image.

Affected products

Vendor	Product	Affected	Fixed
Fortinet	Fortinet FortiOS	FortiOS before 7.0.1	—

References

https://fortiguard.com/advisory/FG-IR-21-046