6.3
Medium
CVE-2021-42757 A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may…
Description
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiOS 7.0 | 7.0.0 → 7.0.2 | No fix stated |
| FortiOS 6.4 | 6.4.0 → 6.4.7 | No fix stated |
| FortiOS 6.2 | 6.2.0 → 6.2.9 | No fix stated |
| FortiOS 6.0 | 6.0.0 → 6.0.13 | No fix stated |
| FortiOS 5.6 | 5.6.0 → 5.6.14 | No fix stated |
| FortiOS 5.4 | 5.4.0 → 5.4.13 | No fix stated |
| FortiOS 5.2 | 5.2.0 → 5.2.15 | No fix stated |
| FortiOS 5.0 | 5.0.0 → 5.0.14 | No fix stated |
| FortiDDoS-F 6.4 | 6.4.0 → 6.4.1 | No fix stated |
Show the 74 other branches Hide the 74 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiDDoS-F | 6.3.0 | No fix stated |
| FortiDDoS-F 6.2 | 6.2.0 → 6.2.2 | No fix stated |
| FortiDDoS-F 6.1 | 6.1.0 → 6.1.4 | No fix stated |
| FortiVoice 6.4 | 6.4.0 → 6.4.4 | No fix stated |
| FortiVoice 6.0 | 6.0.0 → 6.0.10 | No fix stated |
| FortiProxy 7.0 | 7.0.0 → 7.0.1 | No fix stated |
| FortiProxy 2.0 | 2.0.0 → 2.0.7 | No fix stated |
| FortiProxy 1.2 | 1.2.0 → 1.2.13 | No fix stated |
| FortiProxy 1.1 | 1.1.0 → 1.1.6 | No fix stated |
| FortiProxy 1.0 | 1.0.0 → 1.0.7 | No fix stated |
| FortiRecorder 6.4 | 6.4.0 → 6.4.2 | No fix stated |
| FortiRecorder 6.0 | 6.0.0 → 6.0.10 | No fix stated |
| FortiRecorder 2.7 | 2.7.0 → 2.7.7 | No fix stated |
| FortiRecorder 2.6 | 2.6.0 → 2.6.3 | No fix stated |
| FortiPortal 6.0 | 6.0.0 → 6.0.10 | No fix stated |
| FortiPortal 5.3 | 5.3.0 → 5.3.8 | No fix stated |
| FortiPortal 5.2 | 5.2.0 → 5.2.6 | No fix stated |
| FortiPortal 5.1 | 5.1.0 → 5.1.2 | No fix stated |
| FortiPortal 5.0 | 5.0.0 → 5.0.3 | No fix stated |
| FortiMail 7.0 | 7.0.0 → 7.0.2 | No fix stated |
| FortiMail 6.4 | 6.4.0 → 6.4.6 | No fix stated |
| FortiMail 6.2 | 6.2.0 → 6.2.7 | No fix stated |
| FortiMail 6.0 | 6.0.0 → 6.0.12 | No fix stated |
| FortiMail 5.4 | 5.4.0 → 5.4.12 | No fix stated |
| FortiAnalyzer 7.0 | 7.0.0 → 7.0.2 | No fix stated |
| FortiAnalyzer 6.4 | 6.4.0 → 6.4.7 | No fix stated |
| FortiAnalyzer 6.2 | 6.2.0 → 6.2.13 | No fix stated |
| FortiAnalyzer 6.0 | 6.0.0 → 6.0.12 | No fix stated |
| FortiNDR 1.5 | 1.5.0 → 1.5.2 | No fix stated |
| FortiNDR | 1.4.0 | No fix stated |
| FortiNDR 1.3 | 1.3.0 → 1.3.1 | No fix stated |
| FortiNDR | 1.2.0 | No fix stated |
| FortiNDR | 1.1.0 | No fix stated |
| FortiDDoS 5.5 | 5.5.0 → 5.5.1 | No fix stated |
| FortiDDoS 5.4 | 5.4.0 → 5.4.3 | No fix stated |
| FortiDDoS 5.3 | 5.3.0 → 5.3.2 | No fix stated |
| FortiDDoS | 5.2.0 | No fix stated |
| FortiDDoS | 5.1.0 | No fix stated |
| FortiDDoS | 5.0.0 | No fix stated |
| FortiDDoS | 4.7.0 | No fix stated |
| FortiDDoS | 4.6.0 | No fix stated |
| FortiDDoS | 4.5.0 | No fix stated |
| FortiDDoS 4.4 | 4.4.0 → 4.4.2 | No fix stated |
| FortiSwitch 7.0 | 7.0.0 → 7.0.3 | No fix stated |
| FortiSwitch 6.4 | 6.4.0 → 6.4.9 | No fix stated |
| FortiSwitch 6.2 | 6.2.0 → 6.2.7 | No fix stated |
| FortiSwitch 6.0 | 6.0.0 → 6.0.7 | No fix stated |
| FortiADC 6.2 | 6.2.0 → 6.2.2 | No fix stated |
| FortiADC 6.1 | 6.1.0 → 6.1.5 | No fix stated |
| FortiADC 6.0 | 6.0.0 → 6.0.4 | No fix stated |
| FortiADC 5.4 | 5.4.0 → 5.4.5 | No fix stated |
| FortiADC 5.3 | 5.3.0 → 5.3.7 | No fix stated |
| FortiADC 5.2 | 5.2.0 → 5.2.8 | No fix stated |
| FortiADC 5.1 | 5.1.0 → 5.1.7 | No fix stated |
| FortiADC 5.0 | 5.0.0 → 5.0.4 | No fix stated |
| FortiWeb 6.4 | 6.4.0 → 6.4.1 | No fix stated |
| FortiWeb 6.3 | 6.3.0 → 6.3.16 | No fix stated |
| FortiWeb 6.2 | 6.2.0 → 6.2.8 | No fix stated |
| FortiWeb 6.1 | 6.1.0 → 6.1.4 | No fix stated |
| FortiWeb 6.0 | 6.0.0 → 6.0.8 | No fix stated |
| FortiWeb 5.9 | 5.9.0 → 5.9.2 | No fix stated |
| FortiWeb 5.8 | 5.8.0 → 5.8.7 | No fix stated |
| FortiWeb 5.7 | 5.7.0 → 5.7.3 | No fix stated |
| FortiWeb 5.6 | 5.6.0 → 5.6.2 | No fix stated |
| FortiWeb 5.5 | 5.5.0 → 5.5.7 | No fix stated |
| FortiWeb 5.4 | 5.4.0 → 5.4.1 | No fix stated |
| FortiWeb 5.3 | 5.3.0 → 5.3.9 | No fix stated |
| FortiWeb 5.2 | 5.2.0 → 5.2.4 | No fix stated |
| FortiWeb 5.1 | 5.1.0 → 5.1.4 | No fix stated |
| FortiWeb 5.0 | 5.0.0 → 5.0.6 | No fix stated |
| FortiManager 7.0 | 7.0.0 → 7.0.2 | No fix stated |
| FortiManager 6.4 | 6.4.0 → 6.4.7 | No fix stated |
| FortiManager 6.2 | 6.2.0 → 6.2.13 | No fix stated |
| FortiManager 6.0 | 6.0.0 → 6.0.12 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiOS
The 180 CVEs of FortiOS →
CVE-2026-106174
A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated…
6.7
Medium
CVE-2026-106175
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
2.1
Low
CVE-2026-84392
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all…
2.5
Low
CVE-2026-84393
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6,…
7.3
High