CVE-2021-42757mediumCWE-120

CVE-2021-42757

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.5%

probabilidade de exploração

0.5%top 60% das CVEs

exploração observada

nãonenhuma fonte reporta

A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

Produtos afetados

Fortinet · FortiADC Fortinet · FortiAnalyzer Fortinet · FortiDDoS Fortinet · FortiDDoS-F Fortinet · FortiMail Fortinet · FortiManager Fortinet · FortiNDR Fortinet · FortiOS Fortinet · FortiPortal Fortinet · FortiProxy Fortinet · FortiRecorder Fortinet · FortiSwitch Fortinet · FortiVoice Fortinet · FortiWeb

Referências

https://fortiguard.com/advisory/FG-IR-21-173