Medium severity6.7NVD Advisory· Published Jul 18, 2023· Updated Jun 17, 2026
CVE-2021-43072
CVE-2021-43072
Description
A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiAnalyzer version 7.0.2 and below, version 6.4.7 and below, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiManager version 7.0.2 and below, version 6.4.7 and below, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiOS version 7.0.0 through 7.0.4, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x and FortiProxy version 7.0.0 through 7.0.3, 2.0.0 through 2.0.8, 1.2.x, 1.1.x and 1.0.x allows attacker to execute unauthorized code or commands via crafted CLI execute restore image and execute certificate remote operations with the tFTP protocol.
Affected products
10cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: >=5.6.0,<6.4.8
- cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*range: 7.0.0
- (no CPE)range: <=7.0.2, <=6.4.7, <=6.2.9, <=6.0.11, <=5.6.11
cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=5.6.0,<6.4.8
- cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*range: 7.0.0
- (no CPE)range: <=7.0.2, <=6.4.7, <=6.2.9, <=6.0.11, <=5.6.11
cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*range: >=1.0.0,<2.0.9
- (no CPE)range: 7.0.0-7.0.3, 2.0.0-2.0.8, 1.2.x, 1.1.x, 1.0.x
Patches
Vulnerability mechanics
References
2- www.fortiguard.com/psirt/FG-IR-21-206nvdVendor Advisory
- fortiguard.com/advisory/FG-IR-21-206nvdNot Applicable
News mentions
0No linked articles in our index yet.