CVE-2021-24022

🗓️ 20 Jul 2021 10:32:49Reported by fortinetType

A buffer overflow in FortiAnalyzer and FortiManager CLI may allow a local attacker to perform a Denial of Service attac

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the “diagnose system geoip-city” command in the CLI interface of the Fortinet FortiManager device management software, as well as the Fortinet FortiAnalyzer event monitoring and analysis tool, allows a malicious actor to trigger a service failure.	10 Sep 202100:00	–	bdu_fstec
CNNVD	Fortinet FortiManager 缓冲区错误漏洞	8 Jul 202100:00	–	cnnvd
CNVD	Fortinet FortiManager and FortiAnalyzer Buffer Overflow Vulnerability	12 Jul 202100:00	–	cnvd
CVE	CVE-2021-24022	20 Jul 202110:32	–	cve
EUVD	EUVD-2021-10942	7 Oct 202500:30	–	euvd
Fortinet	FortiManager and FortiAnalyzer - Buffer overflow vulnerability through the diagnose system geoip-city command	7 Jul 202100:00	–	fortinet
NVD	CVE-2021-24022	20 Jul 202111:15	–	nvd
OSV	CVE-2021-24022	20 Jul 202111:15	–	osv
Prion	Buffer overflow	20 Jul 202111:15	–	prion
RedhatCVE	CVE-2021-24022	22 May 202519:19	–	redhatcve

[
  {
    "product": "Fortinet FortiAnalyzer, FortiManager",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiAnalyzer 6.4.5 and below, 6.2.7 and below,  6.0.x; FortiManager 6.4.5 and below, 6.2.7 and below, 6.0.x"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/advisory/FG-IR-20-194

20 Jul 2021 10:48Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.7

EPSS0.00219