VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Dec 8, 2021· Updated Jun 17, 2026

CVE-2021-42757

CVE-2021-42757

Description

A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.

Affected products

34
  • Fortinet/FortiRecordercpe-rescue
    cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*
    Range: 6.4.0
  • Fortinet/Fortiportalcpe-rescue2 versions
    cpe:2.3:a:fortinet:fortiportal:6.0.10:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiportal:6.0.10:*:*:*:*:*:*:*range: 6.0.0
    • cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*range: >=5.0.0,<=6.0.10
  • Fortinet/Fortiddos Fcpe-rescue2 versions
    cpe:2.3:o:fortinet:fortiddos:5.5.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fortinet:fortiddos:5.5.1:*:*:*:*:*:*:*range: 5.5.0
    • cpe:2.3:o:fortinet:fortiddos-f:6.4.1:*:*:*:*:*:*:*range: 6.4.0
  • Fortinet/FortiSwitch GUIcpe-rescue2 versions
    cpe:2.3:a:fortinet:fortiswitch:7.0.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiswitch:7.0.3:*:*:*:*:*:*:*range: 7.0.0
    • cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.4.9
  • Fortinet/Fortiadc 200dcpe-rescue2 versions
    cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*range: 6.2.0
    • cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*range: >=5.0.0,<=6.1.5
  • Fortinet/Fortianalyzer2 versions
    cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.4.7
    • cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*range: 7.0.0
  • Fortinet/Fortimail2 versions
    cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*range: >=5.4.0,<=6.2.7
    • cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*range: 7.0.0
  • Fortinet/Fortimanager2 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.4.7
    • cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*range: 7.0.0
  • Fortinet/Fortindr2 versions
    cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*range: >=1.1.0,<=1.5.2
    • (no CPE)range: 1.5.0
  • Fortinet/FortiOS-6K7K3 versions
    cpe:2.3:a:fortinet:fortios-6k7k:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortios-6k7k:*:*:*:*:*:*:*:*range: <=6.2.8
    • cpe:2.3:a:fortinet:fortios-6k7k:6.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortios-6k7k:6.4.6:*:*:*:*:*:*:*
  • Fortinet/Fortiproxy4 versions
    cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*range: >=1.0.0,<=2.0.7
    • cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*
    • (no CPE)range: 7.0.0
  • Fortinet/Fortivoice2 versions
    cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.10
    • cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*range: 6.4.0
  • Fortinet/Fortiweb4 versions
    cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*range: >=5.0.0,<=6.3.16
    • cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*
    • (no CPE)range: 6.4.0
  • Fortinet/Fortios3 versions
    cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*range: >=5.0.0,<=6.0.13
    • (no CPE)range: <6.4.7, 7.0.0-7.0.2
    • cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*range: 7.0.0
  • Fortinet/Fortirecorder Firmware
    cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*
    Range: >=2.6.0,<=6.0.10

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.