CVE-2021-36194

Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted requests.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@fortinet.com

Published

2021-12-09

Last modified

2024-10-25

Weaknesses

CWE-787

Affected products

• Fortinet Fortiweb (Fortinet)
• Fortiweb (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-21-152