Skip to content
OpenAdvisories
High · 7.3 CVE-2021-41027 EUVD-2021-28180GHSA-jgm2-2f8q-fj63

A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code o…

Published Dec 8, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiWeb Category: Network devices

Description

A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code or commands via crafted certificates loaded into the device.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiWeb FortiWeb 6.4.1, 6.4.0 —

References