Lucene search

[email protected]CVE-2021-44170

HistoryJul 18, 2022 - 5:15 p.m.

CVE-2021-44170

2022-07-1817:15:00

CWE-787

[email protected]

web.nvd.nist.gov

cve-2021-44170

nvd

fortios

fortiproxy

cwe-121

buffer overflow

security vulnerability

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:M/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON

A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments.

CPENameOperatorVersion
fortinet:fortiproxyfortinet fortiproxyle1.0.7
fortinet:fortiproxyfortinet fortiproxyle1.1.6
fortinet:fortiosfortinet fortiosle6.0.14
fortinet:fortiproxyfortinet fortiproxylt2.0.8
fortinet:fortiosfortinet fortioslt6.4.9
fortinet:fortiproxyfortinet fortiproxyle1.2.13
fortinet:fortiosfortinet fortiosle7.0.2
fortinet:fortiosfortinet fortioslt6.2.11

CPE	Name	Operator	Version
fortinet:fortiproxy	fortinet fortiproxy	le	1.0.7
fortinet:fortiproxy	fortinet fortiproxy	le	1.1.6
fortinet:fortios	fortinet fortios	le	6.0.14
fortinet:fortiproxy	fortinet fortiproxy	lt	2.0.8
fortinet:fortios	fortinet fortios	lt	6.4.9
fortinet:fortiproxy	fortinet fortiproxy	le	1.2.13
fortinet:fortios	fortinet fortios	le	7.0.2
fortinet:fortios	fortinet fortios	lt	6.2.11

References

fortiguard.com/psirt/FG-IR-21-179

Social References

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:M/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON

Related for CVE-2021-44170

nessus1 prion1 fortinet1 cvelist1