by Kastro CVE-2021-42756
Fortinet FortiWeb — Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 a…
Description · from the CVE record
Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution via specifically crafted HTTP requests.
Affected
ProductAffectedFixed inSource
FortiWeb6.4.0 – 6.4.1–CNA
FortiWeb6.3.0 – 6.3.16–CNA
FortiWeb6.2.0 – 6.2.6–CNA
FortiWeb6.1.0 – 6.1.2–CNA
FortiWeb6.0.0 – 6.0.7–CNA
FortiWeb5.9.0 – 5.9.1–CNA
FortiWeb5.8.5 – 5.8.7–CNA
FortiWeb5.8.0 – 5.8.3–CNA
FortiWeb5.7.0 – 5.7.3–CNA
FortiWeb5.6.0 – 5.6.2–CNA
FortiWeb5.8.0 – < 5.8.*5.8.*CNA
FortiWeb5.7.0 – < 5.7.*5.7.*CNA
Scores by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
fortinet (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total