CVE-2021-36173

🗓️ 08 Dec 2021 18:42:56Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 66 Views

Heap-based buffer overflow in FortiOS firmware signature verification function allowing arbitrary code execution

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2021-36173	8 Dec 202122:23	–	circl
CNNVD	Fortinet FortiOS 缓冲区错误漏洞	7 Dec 202100:00	–	cnnvd
CNVD	Fortinet FortiOS Heap Buffer Overflow Vulnerability (CNVD-2021-99869)	9 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-36173	8 Dec 202118:42	–	cvelist
EUVD	EUVD-2021-22794	7 Oct 202500:30	–	euvd
Fortinet	Protect	7 Dec 202100:00	–	fortinet
Tenable Nessus	Fortinet Fortigate Heap-based Buffer Overflow in firmware signature verification (FG-IR-21-115)	27 Oct 202400:00	–	nessus
Tenable Nessus	Fortinet FortiOS Heap-based Buffer Overflow (FG-IR-21-115)	7 Jan 202200:00	–	nessus
NVD	CVE-2021-36173	8 Dec 202119:15	–	nvd
OSV	CVE-2021-36173	8 Dec 202119:15	–	osv

NVD

Node

fortinet fortiosRange6.0.0–6.0.13

fortinet fortiosRange6.2.0–6.2.9

fortinet fortiosRange6.4.0–6.4.6

fortinet fortiosMatch7.0.0

fortinet fortiosMatch7.0.1

AND

fortinet fortigate-1100eMatch-

fortinet fortigate-200fMatch-

fortinet fortigate-2600fMatch-

fortinet fortigate-3500fMatch-

fortinet fortigate-400eMatch-

fortinet fortigate-600eMatch-

fortinet fortigate_1800fMatch-

fortinet fortigate_2200eMatch-

fortinet fortigate_3300eMatch-

fortinet fortigate_3600eMatch-

fortinet fortigate_40fMatch-

fortinet fortigate_60fMatch-

fortinet fortigate_7121fMatch-

[
  {
    "product": "Fortinet FortiOS",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiOS 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.0 through 6.0.13"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/advisory/FG-IR-21-115

21 Nov 2024 06:13Current

9.1High risk

Vulners AI Score9.1

CVSS 26.8

CVSS 3.18 - 8.8

EPSS0.00672

SSVC

CWE-787