Lucene search

FortinetCVELIST:CVE-2021-36169

HistoryDec 13, 2021 - 1:48 p.m.

CVE-2021-36169

2021-12-1313:48:50

fortinet

www.cve.org

cve-2021-36169

fortinet fortios

unauthorized code execution

hex operations

CVSS3

4.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C

AI Score

6.3

Confidence

High

EPSS

Percentile

12.6%

JSON

A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unauthorized code or commands via specific hex read/write operations.

CNA Affected

[
  {
    "product": "Fortinet FortiOS",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiOS 7.0.0, 6.4.6, 6.2.9"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-21-091