VYPR
← All advisories
High severity8.1NVD Advisory· Published Dec 19, 2024· Updated Jun 17, 2026

CVE-2021-32589

CVE-2021-32589

Description

A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.3.11, version 5.2.10 to 5.2.4 fgfmsd daemon may allow a remote, non-authenticated attacker to execute unauthorized code as root via sending a specifically crafted request to the fgfm port of the targeted device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Fortinet/Fortianalyzer4 versions
    cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: >=5.2.4,<5.6.11
    • cpe:2.3:a:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*range: 7.0.0
    • (no CPE)range: <=7.0.0, <=6.4.5, <=6.2.7, <=6.0.10, <=5.6.10, <=5.4.7, <=5.3.11, <=5.2.10, >=5.2.4
  • Fortinet/Fortimanager4 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=5.0.0,<5.6.11
    • cpe:2.3:a:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*range: 7.0.0
    • (no CPE)range: <=7.0.0, <=6.4.5, <=6.2.7, <=6.0.10, <=5.6.10, <=5.4.7, <=5.2.10
  • Fortinet/Fortiportal
    cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*
    Range: >=4.0.0,<5.3.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.