VYPR
← All advisories
High severity7.1NVD Advisory· Published Apr 6, 2022· Updated Jun 17, 2026

CVE-2021-22127

CVE-2021-22127

Description

An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow an unauthenticated attacker to execute arbitrary code on the host operating system as root via tricking the user into connecting to a network with a malicious name.

Affected products

4
  • Fortinet/Forticlient3 versions
    cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*+ 2 more
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*range: <6.2.9
    • (no CPE)range: <6.4.3, <6.2.9
    • (no CPE)range: FortiClientLinux 6.4.2 and below, FortiClientLinux 6.2.8 and below
  • FortiClient/FortiClientllm-fuzzy
    Range: <6.4.3, <6.2.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.