CVE-2021-26112

published 2022-04-06

CVE-2021-26112: Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentially corrupt control data in memory and execute arbitrary code via specifically crafted requests.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortinet_fortiwan	—	—
fortinet	fortiwan	<= 4.5.8	—
fortinet	fortiwan	—	—

CWE-787