CVE-2021-36169 — Incorrect Authorization in Fortinet Fortios

CWE-863 — Incorrect Authorization4 documents4 sources
Severity
6.0MEDIUMNVD
CNA4.2
EPSS
0.1%
top 68.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Fortinet FortiosFortinet Fortios
Timeline
PublishedDec 13
Latest updateDec 14

Description

A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unauthorized code or commands via specific hex read/write operations.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:NExploitability: 0.8 | Impact: 5.2

Affected Packages2 packages

▶NVDfortinet/fortios6.2.0 — 6.2.10+4
▶CVEListV5fortinet/fortinet_fortiosFortiOS 7.0.0, 6.4.6, 6.2.9

🔴Vulnerability Details

2
GHSA
GHSA-568f-hgvf-96x7: A Hidden Functionality in Fortinet FortiOS 7↗2021-12-14
▶
CVEList
CVE-2021-36169: A Hidden Functionality in Fortinet FortiOS 7↗2021-12-13
▶

📋Vendor Advisories

1
Fortinet
A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unaut...↗2021-12-13
▶
CVE-2021-36169 — Incorrect Authorization in Fortinet | cvebase