VYPR
← All advisories
High severity8.0NVD Advisory· Published Dec 8, 2021· Updated Jun 17, 2026

CVE-2021-36173

CVE-2021-36173

Description

A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13 may allow an attacker to execute arbitrary code via specially crafted installation images.

Affected products

5
  • Fortinet/Fortios4 versions
    cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.13
    • cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*
    • (no CPE)range: 7.0.1, 7.0.0, 6.4.0-6.4.6, 6.2.0-6.2.9, 6.0.0-6.0.13
  • Fortinet/Fortinetcpe-rescue
    Range: FortiOS 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.0 through 6.0.13

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.