imPC@ndo IT

Tracker / CVE-2021-36173

CVE-2021-36173

High 8.0

A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13 may allow an attacker to execute arbitrary code via specially crafted installation images.

Affected products and versions

fortinet fortios
fortinet fortios · 6.0.0 → 6.0.13
fortinet fortios · 6.2.0 → 6.2.9
fortinet fortios · 6.4.0 → 6.4.6

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References