Stack-based buffer overflows in API controllers Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-21-152 Final 1 1 2021-12-07T00:00:00 Current version 2021-12-07T00:00:00 2021-12-07T00:00:00 Multiple stack-based buffer overflows [CWE-121] in the API controllers of FortiWeb may allow an authenticated attacker to achieve arbitrary code execution via specially crafted requests. None Execute unauthorized code or commands FortiWeb version 6.4.1 and earlier.FortiWeb version 6.3.15 and earlier. Upgrade to FortiWeb version 7.0.0 and later.Upgrade to FortiWeb version 6.4.2 and later.Upgrade to FortiWeb version 6.3.16 and later. Internally discovered and reported by Giuseppe Cocomazzi of the Fortinet Product Security team. CVE-2021-36194 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C https://fortiguard.fortinet.com/psirt/FG-IR-21-152 Stack-based buffer overflows in API controllers Reference>