virus logo PSIRT

Multiple stack-based buffer overflow vulnerabilities in CLI command

Summary

Multiple stack-based buffer overflow vulnerabilities in FortiWeb CLI interface may allow an authenticated attacker to execute unauthorized code or commands via config backup arguments.

Affected Products

FortiWeb version 6.3.14 or below
FortiWeb version 6.2.4 or below

Solutions

Upgrade to FortiWeb 6.4.0 or above
Upgrade to FortiWeb 6.3.15 or above
Upgrade to FortiWeb 6.2.5 or above

Acknowledgement

Internally discovered and reported by Fortinet PSIRT.

Timeline

2021-09-07: Initial publication

IR Number FG-IR-20-206
Published Date Sep 7, 2021
Component CLI
Severity High
CVSSv3 Score 7.8
Impact Execute unauthorized code or commands
CVE ID CVE-2021-36179
CVRF Download
Language