CVE-2021-26115: OS Command Injection
An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection (CWE-78) vulnerability in FortiWAN Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-26115?
CVE-2021-26115 has been classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2021-26115?
To fix CVE-2021-26115, upgrade FortiWAN to version 4.5.8 or later, which addresses this vulnerability.
Who is affected by CVE-2021-26115?
CVE-2021-26115 affects FortiWAN versions 4.5.7 and below, specifically targeting local authenticated users.
What type of vulnerability is CVE-2021-26115?
CVE-2021-26115 is an OS command injection vulnerability, specifically classified under CWE-78.
Can CVE-2021-26115 be exploited remotely?
CVE-2021-26115 requires local access and authenticated privileges for exploitation, thus cannot be exploited remotely.