by Kastro
Paper/Archive/CVE-2021-32589

CVE-2021-32589

Fortinet FortiManager — A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10…

EPSS 9%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 95.2.952 × 2019.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.3.11, version 5.2.10 to 5.2.4 fgfmsd daemon may allow a remote, non-authenticated attacker to execute unauthorized code as root via sending a specifically crafted request to the fgfm port of the targeted device.

Affected

ProductAffectedFixed inSource
FortiManager7.0.0–CNA
FortiManager6.4.0 – 6.4.5–CNA
FortiManager6.2.0 – 6.2.7–CNA
FortiManager6.0.0 – 6.0.10–CNA
FortiManager5.6.0 – 5.6.10–CNA
FortiManager5.4.0 – 5.4.7–CNA
FortiManager5.2.0 – 5.2.10–CNA
FortiManager5.0.0 – 5.0.12–CNA
FortiAnalyzer7.0.0–CNA
FortiAnalyzer6.4.0 – 6.4.5–CNA
FortiAnalyzer6.2.0 – 6.2.7–CNA
FortiAnalyzer6.0.0 – 6.0.10–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
fortinet (CNA)7.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:W/RC:C
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

reffortiguard.fortinet.com/psirt/FG-IR-21-067