6.3
Medium
CVE-2021-36193 Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an…
Description
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| n/a | Versions not published | |
| FortiFone 3.0 | 3.0.0 → 3.0.11 | No fix stated |
| FortiADC | 7.0.0 | No fix stated |
| FortiADC 6.2 | 6.2.0 → 6.2.2 | No fix stated |
| FortiADC 6.1 | 6.1.0 → 6.1.6 | No fix stated |
| FortiADC 6.0 | 6.0.0 → 6.0.4 | No fix stated |
| FortiADC 5.4 | 5.4.0 → 5.4.5 | No fix stated |
| FortiADC 5.3 | 5.3.0 → 5.3.7 | No fix stated |
| FortiADC 5.2 | 5.2.0 → 5.2.8 | No fix stated |
Show the 42 other branches Hide the 42 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiADC 5.1 | 5.1.0 → 5.1.7 | No fix stated |
| FortiADC 5.0 | 5.0.0 → 5.0.4 | No fix stated |
| FortiMail 7.0 | 7.0.0 → 7.0.2 | No fix stated |
| FortiMail 6.4 | 6.4.0 → 6.4.6 | No fix stated |
| FortiMail 6.2 | 6.2.0 → 6.2.8 | No fix stated |
| FortiMail 6.0 | 6.0.0 → 6.0.12 | No fix stated |
| FortiMail 5.4 | 5.4.0 → 5.4.12 | No fix stated |
| FortiDDoS | 5.7.0 | No fix stated |
| FortiDDoS 5.6 | 5.6.0 → 5.6.1 | No fix stated |
| FortiDDoS 5.5 | 5.5.0 → 5.5.1 | No fix stated |
| FortiDDoS 5.4 | 5.4.0 → 5.4.3 | No fix stated |
| FortiDDoS 5.3 | 5.3.0 → 5.3.2 | No fix stated |
| FortiDDoS | 5.2.0 | No fix stated |
| FortiDDoS | 5.1.0 | No fix stated |
| FortiDDoS | 5.0.0 | No fix stated |
| FortiDDoS | 4.7.0 | No fix stated |
| FortiDDoS | 4.6.0 | No fix stated |
| FortiDDoS | 4.5.0 | No fix stated |
| FortiDDoS 4.4 | 4.4.0 → 4.4.2 | No fix stated |
| FortiDDoS-F | 6.3.0 | No fix stated |
| FortiDDoS-F 6.2 | 6.2.0 → 6.2.2 | No fix stated |
| FortiDDoS-F 6.1 | 6.1.0 → 6.1.4 | No fix stated |
| FortiVoice 6.4 | 6.4.0 → 6.4.4 | No fix stated |
| FortiVoice 6.0 | 6.0.0 → 6.0.10 | No fix stated |
| FortiDDoS-CM 5.5 | 5.5.0 → 5.5.1 | No fix stated |
| FortiDDoS-CM 5.4 | 5.4.0 → 5.4.3 | No fix stated |
| FortiDDoS-CM 5.3 | 5.3.0 → 5.3.1 | No fix stated |
| FortiDDoS-CM | 5.2.0 | No fix stated |
| FortiDDoS-CM | 5.1.0 | No fix stated |
| FortiDDoS-CM | 5.0.0 | No fix stated |
| FortiDDoS-CM | 4.7.0 | No fix stated |
| FortiWeb 6.4 | 6.4.0 → 6.4.1 | No fix stated |
| FortiWeb 6.3 | 6.3.0 → 6.3.15 | No fix stated |
| FortiRecorder 6.4 | 6.4.0 → 6.4.2 | No fix stated |
| FortiRecorder 6.0 | 6.0.0 → 6.0.10 | No fix stated |
| FortiRecorder 2.7 | 2.7.0 → 2.7.7 | No fix stated |
| FortiRecorder 2.6 | 2.6.0 → 2.6.3 | No fix stated |
| FortiNDR 1.5 | 1.5.0 → 1.5.3 | No fix stated |
| FortiNDR | 1.4.0 | No fix stated |
| FortiNDR 1.3 | 1.3.0 → 1.3.1 | No fix stated |
| FortiNDR | 1.2.0 | No fix stated |
| FortiNDR | 1.1.0 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of n/a
The 144658 CVEs of n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Not rated
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Not rated
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Not rated
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Not rated