CVE-2021-44170
18.07.2022, 17:15
A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortiproxy | 1.0.0 ≤ 𝑥 ≤ 1.0.7 |
| fortinet | fortiproxy | 1.1.0 ≤ 𝑥 ≤ 1.1.6 |
| fortinet | fortiproxy | 1.2.0 ≤ 𝑥 ≤ 1.2.13 |
| fortinet | fortiproxy | 2.0.0 ≤ 𝑥 < 2.0.8 |
| fortinet | fortios | 6.0.0 ≤ 𝑥 ≤ 6.0.14 |
| fortinet | fortios | 6.2.0 ≤ 𝑥 < 6.2.11 |
| fortinet | fortios | 6.4.0 ≤ 𝑥 < 6.4.9 |
| fortinet | fortios | 7.0.0 ≤ 𝑥 ≤ 7.0.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration