CVE-2021-44170: Buffer Overflow

Q: What is CVE-2021-44170?

CVE-2021-44170 is a stack-based buffer overflow vulnerability in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8.

Q: What is the severity of CVE-2021-44170?

The severity of CVE-2021-44170 is medium, with a severity value of 6.7.

Q: How can an attacker exploit CVE-2021-44170?

An authenticated attacker can exploit CVE-2021-44170 by executing unauthorized code or commands via specially crafted command line arguments.

Q: Which software versions are affected by CVE-2021-44170?

FortiOS versions before 7.0.4 and FortiProxy versions before 2.0.8 are affected by CVE-2021-44170.

Q: Is there a fix available for CVE-2021-44170?

Yes, it is recommended to update to FortiOS 7.0.4 or later and FortiProxy 2.0.8 or later to fix CVE-2021-44170.

Published Jul 18, 2022

Updated

A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments.

Affected Software

8 affected components

Fortinet FortiProxy>=1.0.0<=1.0.7

Fortinet FortiProxy>=1.1.0<=1.1.6

Fortinet FortiProxy>=1.2.0<=1.2.13

Fortinet FortiProxy>=2.0.0<2.0.8

Fortinet FortiOS>=6.0.0<=6.0.14

Fortinet FortiOS>=6.2.0<6.2.11

Fortinet FortiOS>=6.4.0<6.4.9

Fortinet FortiOS>=7.0.0<=7.0.2

Event History

Jul 18, 2022

CVE Published

via MITRE·04:35 PM

Data Sourced

via MITRE·04:35 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-44170?

CVE-2021-44170 is a stack-based buffer overflow vulnerability in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8.

What is the severity of CVE-2021-44170?

The severity of CVE-2021-44170 is medium, with a severity value of 6.7.

How can an attacker exploit CVE-2021-44170?