CVE-2021-36193CWE-121

Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code…

Medium · published February 2, 2022

CVSS v3.1
6.3
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00816 · 56.7th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-02-02T11:19Z
EPSS history
Timeline
  • 02 FEB 11:19Z
    Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code…
    cvelistv5