Skip to content
OpenAdvisories
Low · 3.3 Known exploited Public exploit CVE-2021-44168 EUVD-2021-31018GHSA-689x-phc2-9p4m

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local…

Published Jan 4, 2022 · Updated Oct 21, 2025 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiOS Category: Network devices

Description

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiOS FortiOS before 7.0.3 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • 0xhaggis/CVE-2021-44168 ★ 21 · Feb 8, 2023

    A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References