Skip to content
fr Sign in
6.7 Medium

CVE-2021-22130 A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0…

Description

A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 may allow an authenticated, remote attacker to perform a Denial of Service attack by running the `diagnose sys cpuset` with a large cpuset mask value. Fortinet is not aware of any successful exploitation of this vulnerability that would lead to code execution.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiProxy Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiProxy

The 3 CVEs of Fortinet FortiProxy →
CVE-2021-43081 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and… 6.1 Medium CVE-2021-22128 An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an… 7.1 High
Track this CVE