Vulnerabilities > CVE-2021-32589 - Unspecified vulnerability in Fortinet Fortianalyzer, Fortimanager and Fortiportal

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

fortinet

critical

NVD

Published: 2024-12-19

Updated: 2025-01-31

Summary

A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.3.11, version 5.2.10 to 5.2.4 fgfmsd daemon may allow a remote, non-authenticated attacker to execute unauthorized code as root via sending a specifically crafted request to the fgfm port of the targeted device.

Vulnerable Configurations

Part	Description	Count
Application	Fortinet Fortinet Fortimanager 6.4.0 Fortinet Fortimanager 6.4.1 Fortinet Fortimanager 6.4.2 Fortinet Fortimanager 6.4.3 Fortinet Fortimanager 6.4.4 Fortinet Fortimanager 6.4.5 Fortinet Fortimanager 6.0.1 Fortinet Fortimanager 6.0.2 Fortinet Fortimanager 6.0.3 Fortinet Fortimanager 6.0.4 Fortinet Fortimanager 6.0.5 Fortinet Fortimanager 6.0.6 Fortinet Fortimanager 6.0.7 Fortinet Fortimanager 6.0.8 Fortinet Fortimanager 6.0.9 Fortinet Fortimanager 6.0.10 Fortinet Fortimanager 6.0.11 Fortinet Fortimanager 6.2.0 Fortinet Fortimanager 6.2.1 Fortinet Fortimanager 6.2.2 Fortinet Fortimanager 6.2.3 Fortinet Fortimanager 6.2.4 Fortinet Fortimanager 6.2.5 Fortinet Fortimanager 6.2.6 Fortinet Fortimanager 6.2.7 Fortinet Fortimanager 7.0.0 Fortinet Fortimanager 5.0.0 Fortinet Fortimanager 5.0.1 Fortinet Fortimanager 5.0.2 Fortinet Fortimanager 5.0.3 Fortinet Fortimanager 5.0.4 Fortinet Fortimanager 5.0.5 Fortinet Fortimanager 5.0.6 Fortinet Fortimanager 5.0.7 Fortinet Fortimanager 5.0.8 Fortinet Fortimanager 5.0.9 Fortinet Fortimanager 5.0.10 Fortinet Fortimanager 5.0.11 Fortinet Fortimanager 5.0.12 Fortinet Fortimanager 5.2.0 Fortinet Fortimanager 5.2.1 Fortinet Fortimanager 5.2.2 Fortinet Fortimanager 5.2.3 Fortinet Fortimanager 5.2.4 Fortinet Fortimanager 5.2.6 Fortinet Fortimanager 5.2.7 Fortinet Fortimanager 5.2.9 Fortinet Fortimanager 5.2.10 Fortinet Fortimanager 5.4.0 Fortinet Fortimanager 5.4.1 Fortinet Fortimanager 5.4.2 Fortinet Fortimanager 5.4.3 Fortinet Fortimanager 5.4.4 Fortinet Fortimanager 5.4.5 Fortinet Fortimanager 5.4.6 Fortinet Fortimanager 5.4.7 Fortinet Fortimanager 5.6.0 Fortinet Fortimanager 5.6.1 Fortinet Fortimanager 5.6.2 Fortinet Fortimanager 5.6.3 Fortinet Fortimanager 5.6.4 Fortinet Fortimanager 5.6.5 Fortinet Fortimanager 5.6.6 Fortinet Fortimanager 5.6.7 Fortinet Fortimanager 5.6.8 Fortinet Fortimanager 5.6.9 Fortinet Fortimanager 5.6.10 Fortinet Fortianalyzer 6.4.0 Fortinet Fortianalyzer 6.4.1 Fortinet Fortianalyzer 6.4.2 Fortinet Fortianalyzer 6.4.3 Fortinet Fortianalyzer 6.4.4 Fortinet Fortianalyzer 6.4.5 Fortinet Fortianalyzer 7.0.0 Fortinet Fortianalyzer 6.2.0 Fortinet Fortianalyzer 6.2.1 Fortinet Fortianalyzer 6.2.2 Fortinet Fortianalyzer 6.2.3 Fortinet Fortianalyzer 6.2.4 Fortinet Fortianalyzer 6.2.5 Fortinet Fortianalyzer 6.2.6 Fortinet Fortianalyzer 6.2.7 Fortinet Fortianalyzer 6.0.0 Fortinet Fortianalyzer 6.0.1 Fortinet Fortianalyzer 6.0.2 Fortinet Fortianalyzer 6.0.3 Fortinet Fortianalyzer 6.0.4 Fortinet Fortianalyzer 6.0.5 Fortinet Fortianalyzer 6.0.6 Fortinet Fortianalyzer 6.0.7 Fortinet Fortianalyzer 6.0.8 Fortinet Fortianalyzer 6.0.9 Fortinet Fortianalyzer 6.0.10 Fortinet Fortianalyzer 5.2.4 Fortinet Fortianalyzer 5.2.5 Fortinet Fortianalyzer 5.2.6 Fortinet Fortianalyzer 5.2.7 Fortinet Fortianalyzer 5.2.8 Fortinet Fortianalyzer 5.2.9 Fortinet Fortianalyzer 5.2.10 Fortinet Fortianalyzer 5.4.0 Fortinet Fortianalyzer 5.4.1 Fortinet Fortianalyzer 5.4.2 Fortinet Fortianalyzer 5.4.3 Fortinet Fortianalyzer 5.4.4 Fortinet Fortianalyzer 5.4.5 Fortinet Fortianalyzer 5.4.6 Fortinet Fortianalyzer 5.4.7 Fortinet Fortianalyzer 5.6.0 Fortinet Fortianalyzer 5.6.1 Fortinet Fortianalyzer 5.6.2 Fortinet Fortianalyzer 5.6.3 Fortinet Fortianalyzer 5.6.4 Fortinet Fortianalyzer 5.6.5 Fortinet Fortianalyzer 5.6.6 Fortinet Fortianalyzer 5.6.7 Fortinet Fortianalyzer 5.6.8 Fortinet Fortianalyzer 5.6.9 Fortinet Fortianalyzer 5.6.10 Fortinet Fortiportal 6.0.0 Fortinet Fortiportal 6.0.1 Fortinet Fortiportal 6.0.2 Fortinet Fortiportal 6.0.3 Fortinet Fortiportal 6.0.4 Fortinet Fortiportal 6.0.5 Fortinet Fortiportal 4.0.0 Fortinet Fortiportal 4.0.1 Fortinet Fortiportal 4.0.2 Fortinet Fortiportal 4.0.3 Fortinet Fortiportal 4.0.4 Fortinet Fortiportal 4.1.0 Fortinet Fortiportal 4.1.1 Fortinet Fortiportal 4.1.2 Fortinet Fortiportal 4.2.0 Fortinet Fortiportal 4.2.1 Fortinet Fortiportal 4.2.2 Fortinet Fortiportal 4.2.3 Fortinet Fortiportal 4.2.4 Fortinet Fortiportal 5.0.0 Fortinet Fortiportal 5.0.1 Fortinet Fortiportal 5.0.2 Fortinet Fortiportal 5.0.3 Fortinet Fortiportal 5.1.0 Fortinet Fortiportal 5.1.1 Fortinet Fortiportal 5.1.2 Fortinet Fortiportal 5.2.0 Fortinet Fortiportal 5.2.1 Fortinet Fortiportal 5.2.2 Fortinet Fortiportal 5.2.3 Fortinet Fortiportal 5.2.4 Fortinet Fortiportal 5.2.5 Fortinet Fortiportal 5.2.6 Fortinet Fortiportal 5.2.7 Fortinet Fortiportal 5.3.0 Fortinet Fortiportal 5.3.1 Fortinet Fortiportal 5.3.2 Fortinet Fortiportal 5.3.3 Fortinet Fortiportal 5.3.4 Fortinet Fortiportal 5.3.5 Fortinet Fortiportal 5.3.6	161

References

https://fortiguard.fortinet.com/psirt/FG-IR-21-067