EUVD-2021-10942

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Buffer overflow in FortiAnalyzer and FortiManager CLI allows Denial of Service via large IP command.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the “diagnose system geoip-city” command in the CLI interface of the Fortinet FortiManager device management software, as well as the Fortinet FortiAnalyzer event monitoring and analysis tool, allows a malicious actor to trigger a service failure.	10 Sep 202100:00	–	bdu_fstec
CNNVD	Fortinet FortiManager 缓冲区错误漏洞	8 Jul 202100:00	–	cnnvd
CNVD	Fortinet FortiManager and FortiAnalyzer Buffer Overflow Vulnerability	12 Jul 202100:00	–	cnvd
CVE	CVE-2021-24022	20 Jul 202110:32	–	cve
Cvelist	CVE-2021-24022	20 Jul 202110:32	–	cvelist
Fortinet	FortiManager and FortiAnalyzer - Buffer overflow vulnerability through the diagnose system geoip-city command	7 Jul 202100:00	–	fortinet
NVD	CVE-2021-24022	20 Jul 202111:15	–	nvd
OSV	CVE-2021-24022	20 Jul 202111:15	–	osv
Prion	Buffer overflow	20 Jul 202111:15	–	prion
RedhatCVE	CVE-2021-24022	22 May 202519:19	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "6ff39f44-9b79-3010-918a-999e55865119",
        "vendor": {
          "name": "Fortinet"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2ab2a4d3-d98b-36f8-b86c-60f950d748d9",
        "product": {
          "name": "Fortinet FortiAnalyzer, FortiManager"
        },
        "product_version": "FortiAnalyzer 6.4.5 and below, 6.2.7 and below,  6.0.x; FortiManager 6.4.5 and below, 6.2.7 and below, 6.0.x"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/advisory/FG-IR-20-194
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

4.9Medium risk

Vulners AI Score4.9

CVSS 3.14.4 - 6.7

CVSS 22.1

EPSS0.0005

SSVC