VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 19, 2024· Updated Dec 20, 2024

CVE-2021-32589

CVE-2021-32589

Description

A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.3.11, version 5.2.10 to 5.2.4 fgfmsd daemon may allow a remote, non-authenticated attacker to execute unauthorized code as root via sending a specifically crafted request to the fgfm port of the targeted device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Fortinet/Fortianalyzerv52 versions
    cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*range: 7.0.0
    • (no CPE)range: <=7.0.0, <=6.4.5, <=6.2.7, <=6.0.10, <=5.6.10, <=5.4.7, <=5.3.11, >=5.2.4 <=5.2.10
  • Fortinet/Fortimanagerv52 versions
    cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*range: 7.0.0
    • (no CPE)range: <=7.0.0, <=6.4.5, <=6.2.7, <=6.0.10, <=5.6.10, <=5.4.7, <=5.2.10, <=5.0.12

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.