CVE-2021-42757

CVSS 6.3 MEDIUMEPSS 0.5%CWE-120

A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

Produtos afetados

Fortinet · FortiADC Fortinet · FortiAnalyzer Fortinet · FortiDDoS Fortinet · FortiDDoS-F Fortinet · FortiMail Fortinet · FortiManager Fortinet · FortiNDR Fortinet · FortiOS Fortinet · FortiPortal Fortinet · FortiProxy Fortinet · FortiRecorder Fortinet · FortiSwitch Fortinet · FortiVoice Fortinet · FortiWeb

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://fortiguard.com/advisory/FG-IR-21-173