cbcvebase.
CVE-2021-41021
published 2021-12-08

CVE-2021-41021: A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via…

PriorityP431medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.25%
16.3th percentile
A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via the sudo command.

Affected

14 ranges
VendorProductVersion rangeFixed in
fortinetfortinac——
fortinetfortinac——
fortinetfortinac——
fortinetfortinac——
fortinetfortinac——
fortinetfortinac——
fortinetfortinac——
fortinetfortinac——
fortinetfortinac——
fortinetfortinac——
fortinetfortinac——
fortinetfortinac——
fortinetfortinac——
fortinetfortinet_fortinac——

CVSS provenance

nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.