VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Feb 2, 2022· Updated Jun 17, 2026

CVE-2021-36193

CVE-2021-36193

Description

Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.

Affected products

13
  • Fortinet/Fortimailv5
    cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*
    Range: 7.0.0
  • Fortinet/Fortindrv5
    cpe:2.3:a:fortinet:fortindr:1.5.3:*:*:*:*:*:*:*
    Range: 1.5.0
  • Fortinet/FortiRecordercpe-rescue
    cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*
    Range: 6.4.0
  • Fortinet/Fortivoicev5
    cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*
    Range: 6.4.0
  • Fortinet/Fortiweb3 versions
    cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*range: >=5.0.0,<6.2.6
    • cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*range: 6.4.0
    • (no CPE)range: <6.4.2
  • Fortinet/Fortiadc 200dcpe-rescue
    cpe:2.3:h:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*
    Range: 7.0.0
  • Fortinet/Fortiddos Fv53 versions
    cpe:2.3:o:fortinet:fortiddos-f:6.3.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fortinet:fortiddos-f:6.3.0:*:*:*:*:*:*:*range: 6.3.0
    • cpe:2.3:o:fortinet:fortiddos:5.7.0:*:*:*:*:*:*:*range: 5.7.0
    • (no CPE)range: 5.5.0
  • FortiWeb/FortiWebllm-fuzzy
    Range: <6.4.2
  • Fortinet/FortiFonecpe-rescue
    Range: 3.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.