Lucene search

[email protected]NVD:CVE-2021-36169

HistoryDec 13, 2021 - 2:15 p.m.

CVE-2021-36169

2021-12-1314:15:07

[email protected]

web.nvd.nist.gov

cve-2021-36169

hidden functionality

hex operations

security vulnerability

authorization bypass

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:C/A:N

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

12.6%

JSON

A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unauthorized code or commands via specific hex read/write operations.

Affected configurations

Nvd

Node

fortinetfortiosRange5.6.0–5.6.14

fortinetfortiosRange6.0.0–6.0.14

fortinetfortiosRange6.2.0–6.2.10

fortinetfortiosRange6.4.0–6.4.7

fortinetfortiosMatch7.0.0

VendorProductVersionCPE
fortinetfortios*cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
fortinetfortios7.0.0cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fortinet	fortios	*	cpe:2.3:o:fortinet:fortios::::::::
fortinet	fortios	7.0.0	cpe:2.3:o:fortinet:fortios:7.0.0:::::::*

References

fortiguard.com/advisory/FG-IR-21-091

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:C/A:N

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

12.6%

JSON

Related for NVD:CVE-2021-36169

prion1 cvelist1 fortinet1 cnvd1 cve1