Skip to content
OpenAdvisories
Medium · 6.4 CVE-2021-26096 EUVD-2021-12917GHSA-w667-46wg-c64r

Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to m…

Published Aug 4, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiSandbox Category: Network devices

Description

Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command line arguments.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiSandbox FortiSandbox before 4.0.0 —

References