CVE-2021-36173
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13 may allow an attacker to execute arbitrary code via specially crafted installation images.
Affected (5)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.0.0 to 6.0.13 |
| Running on/with | Platform Versions |
|---|---|
Fortinet Fortigate 1100e | All versions |
Fortinet Fortigate 200f | All versions |
Fortinet Fortigate 2600f | All versions |
Fortinet Fortigate 3500f | All versions |
Fortinet Fortigate 400e | All versions |
Fortinet Fortigate 600e | All versions |
Fortinet Fortigate 1800f | All versions |
Fortinet Fortigate 2200e | All versions |
Fortinet Fortigate 3300e | All versions |
Fortinet Fortigate 3600e | All versions |
Fortinet Fortigate 40f | All versions |
Fortinet Fortigate 60f | All versions |
Fortinet Fortigate 7121f | All versions |
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Timeline
No history available yet.