Skip to content
OpenAdvisories
Medium · 6.7 CVE-2021-44170 EUVD-2021-31020GHSA-h85f-qmh7-qh6m

A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 m…

Published Jul 18, 2022 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiProxy, FortiOS Category: Network devices

Description

A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiProxy, FortiOS FortiOS before 7.0.4; FortiProxy before 2.0.8 —

References