Lucene search
PRIOn knowledge basePRION:CVE-2021-24016HistorySep 30, 2021 - 4:15 p.m.
Input validation
2021-09-3016:15:00
PRIOn knowledge base
www.prio-n.com
1
An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in policy name, when exported as excel file and opened unsafely on the victim host.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fortimanager | lt | 6.2.8 | |
| fortimanager | ge | 6.4.0 | |
| fortimanager | lt | 6.4.4 |
References
Related
cvelist
cvelist
CVE-2021-24016
2021-09-30 15:18:38
fortinet
fortinet
cnvd
cnvd
Fortinet FortiManager Code Injection Vulnerability
2021-09-09 00:00:00
cve
cve
CVE-2021-24016
2021-09-30 16:15:07
nvd
nvd
CVE-2021-24016
2021-09-30 16:15:07