CVE-2021-26111: Medium severity fortinet fortiswitch vulnerability
A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-26111?
CVE-2021-26111 is a vulnerability in FortiSwitch devices that allows an attacker on an adjacent network to exhaust available memory.
Which versions of FortiSwitch are affected by CVE-2021-26111?
FortiSwitch versions 3.6.11 and below, 6.0.0 to 6.0.6, 6.2.0 to 6.2.6, and 6.4.0 to 6.4.6 are affected by CVE-2021-26111.
What is the severity of CVE-2021-26111?
CVE-2021-26111 has a severity rating of 6.5 (medium).
How can an attacker exploit CVE-2021-26111?
An attacker can exploit CVE-2021-26111 by sending specially crafted LLDP/CDP/EDP packets to the vulnerable FortiSwitch device from an adjacent network, causing it to exhaust available memory.
Is there a fix for CVE-2021-26111?
Yes, Fortinet has released patches to address the vulnerability. It is recommended to upgrade to the latest version of the affected FortiSwitch firmware.