8.8

CVE-2021-36173

A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13 may allow an attacker to execute arbitrary code via specially crafted installation images.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fortinet ≫ FortiOS Version >= 6.0.0 <= 6.0.13
   Fortinet ≫ Fortigate-1100e Version -
   Fortinet ≫ Fortigate-200f Version -
   Fortinet ≫ Fortigate-2600f Version -
   Fortinet ≫ Fortigate-3500f Version -
   Fortinet ≫ Fortigate-400e Version -
   Fortinet ≫ Fortigate-600e Version -
   Fortinet ≫ Fortigate 1800f Version -
   Fortinet ≫ Fortigate 2200e Version -
   Fortinet ≫ Fortigate 3300e Version -
   Fortinet ≫ Fortigate 3600e Version -
   Fortinet ≫ Fortigate 40f Version -
   Fortinet ≫ Fortigate 60f Version -
   Fortinet ≫ Fortigate 7121f Version -
Fortinet ≫ FortiOS Version >= 6.2.0 <= 6.2.9
   Fortinet ≫ Fortigate-1100e Version -
   Fortinet ≫ Fortigate-200f Version -
   Fortinet ≫ Fortigate-2600f Version -
   Fortinet ≫ Fortigate-3500f Version -
   Fortinet ≫ Fortigate-400e Version -
   Fortinet ≫ Fortigate-600e Version -
   Fortinet ≫ Fortigate 1800f Version -
   Fortinet ≫ Fortigate 2200e Version -
   Fortinet ≫ Fortigate 3300e Version -
   Fortinet ≫ Fortigate 3600e Version -
   Fortinet ≫ Fortigate 40f Version -
   Fortinet ≫ Fortigate 60f Version -
   Fortinet ≫ Fortigate 7121f Version -
Fortinet ≫ FortiOS Version >= 6.4.0 <= 6.4.6
   Fortinet ≫ Fortigate-1100e Version -
   Fortinet ≫ Fortigate-200f Version -
   Fortinet ≫ Fortigate-2600f Version -
   Fortinet ≫ Fortigate-3500f Version -
   Fortinet ≫ Fortigate-400e Version -
   Fortinet ≫ Fortigate-600e Version -
   Fortinet ≫ Fortigate 1800f Version -
   Fortinet ≫ Fortigate 2200e Version -
   Fortinet ≫ Fortigate 3300e Version -
   Fortinet ≫ Fortigate 3600e Version -
   Fortinet ≫ Fortigate 40f Version -
   Fortinet ≫ Fortigate 60f Version -
   Fortinet ≫ Fortigate 7121f Version -
Fortinet ≫ FortiOS Version 7.0.0
   Fortinet ≫ Fortigate-1100e Version -
   Fortinet ≫ Fortigate-200f Version -
   Fortinet ≫ Fortigate-2600f Version -
   Fortinet ≫ Fortigate-3500f Version -
   Fortinet ≫ Fortigate-400e Version -
   Fortinet ≫ Fortigate-600e Version -
   Fortinet ≫ Fortigate 1800f Version -
   Fortinet ≫ Fortigate 2200e Version -
   Fortinet ≫ Fortigate 3300e Version -
   Fortinet ≫ Fortigate 3600e Version -
   Fortinet ≫ Fortigate 40f Version -
   Fortinet ≫ Fortigate 60f Version -
   Fortinet ≫ Fortigate 7121f Version -
Fortinet ≫ FortiOS Version 7.0.1
   Fortinet ≫ Fortigate-1100e Version -
   Fortinet ≫ Fortigate-200f Version -
   Fortinet ≫ Fortigate-2600f Version -
   Fortinet ≫ Fortigate-3500f Version -
   Fortinet ≫ Fortigate-400e Version -
   Fortinet ≫ Fortigate-600e Version -
   Fortinet ≫ Fortigate 1800f Version -
   Fortinet ≫ Fortigate 2200e Version -
   Fortinet ≫ Fortigate 3300e Version -
   Fortinet ≫ Fortigate 3600e Version -
   Fortinet ≫ Fortigate 40f Version -
   Fortinet ≫ Fortigate 60f Version -
   Fortinet ≫ Fortigate 7121f Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.44% 0.697
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Fortinet 8 2.1 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://fortiguard.com/advisory/FG-IR-21-115
Patch
Vendor Advisory