CVE-2021-41027

A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code or commands via crafted certificates loaded into the device.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@fortinet.com

Published

2021-12-08

Last modified

2024-10-25

Weaknesses

CWE-787

Affected products

• Fortinet Fortiweb (Fortinet)
• Fortiweb (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-21-134