Vulnerabilities > CVE-2021-42757 - Out-of-bounds Write vulnerability in Fortinet products

CVSS 6.7 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

NVD

Published: 2021-12-08

Updated: 2024-01-18

Summary

A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.

Vulnerable Configurations

Part	Description	Count
Application	Fortinet Fortinet Fortiweb 6.4.0 Fortinet Fortiweb 6.4.1 Fortinet Fortiweb 5.0.0 Fortinet Fortiweb 5.0.1 Fortinet Fortiweb 5.0.2 Fortinet Fortiweb 5.0.3 Fortinet Fortiweb 5.0.4 Fortinet Fortiweb 5.1.0 Fortinet Fortiweb 5.1.1 Fortinet Fortiweb 5.1.2 Fortinet Fortiweb 5.1.3 Fortinet Fortiweb 5.1.4 Fortinet Fortiweb 5.2.0 Fortinet Fortiweb 5.2.1 Fortinet Fortiweb 5.2.2 Fortinet Fortiweb 5.2.3 Fortinet Fortiweb 5.2.4 Fortinet Fortiweb 5.3.0 Fortinet Fortiweb 5.3.1 Fortinet Fortiweb 5.3.2 Fortinet Fortiweb 5.3.3 Fortinet Fortiweb 5.3.4 Fortinet Fortiweb 5.3.5 Fortinet Fortiweb 5.3.6 Fortinet Fortiweb 5.3.7 Fortinet Fortiweb 5.3.8 Fortinet Fortiweb 5.3.9 Fortinet Fortiweb 5.4.0 Fortinet Fortiweb 5.4.1 Fortinet Fortiweb 5.5.0 Fortinet Fortiweb 5.5.1 Fortinet Fortiweb 5.5.2 Fortinet Fortiweb 5.5.3 Fortinet Fortiweb 5.5.4 Fortinet Fortiweb 5.5.5 Fortinet Fortiweb 5.5.6 Fortinet Fortiweb 5.6.0 Fortinet Fortiweb 5.6.1 Fortinet Fortiweb 5.7.0 Fortinet Fortiweb 5.7.1 Fortinet Fortiweb 5.7.2 Fortinet Fortiweb 5.8.0 Fortinet Fortiweb 5.8.1 Fortinet Fortiweb 5.8.2 Fortinet Fortiweb 5.8.3 Fortinet Fortiweb 5.8.4 Fortinet Fortiweb 5.8.5 Fortinet Fortiweb 5.8.6 Fortinet Fortiweb 5.9.0 Fortinet Fortiweb 5.9.1 Fortinet Fortiweb 5.9.2 Fortinet Fortiweb 6.0.0 Fortinet Fortiweb 6.0.1 Fortinet Fortiweb 6.0.2 Fortinet Fortiweb 6.0.3 Fortinet Fortiweb 6.0.4 Fortinet Fortiweb 6.0.5 Fortinet Fortiweb 6.0.6 Fortinet Fortiweb 6.0.7 Fortinet Fortiweb 6.0.8 Fortinet Fortiweb 6.1.0 Fortinet Fortiweb 6.1.1 Fortinet Fortiweb 6.1.2 Fortinet Fortiweb 6.1.3 Fortinet Fortiweb 6.2.0 Fortinet Fortiweb 6.2.1 Fortinet Fortiweb 6.2.2 Fortinet Fortiweb 6.2.3 Fortinet Fortiweb 6.2.4 Fortinet Fortiweb 6.2.5 Fortinet Fortiweb 6.2.6 Fortinet Fortiweb 6.2.7 Fortinet Fortiweb 6.3.0 Fortinet Fortiweb 6.3.1 Fortinet Fortiweb 6.3.2 Fortinet Fortiweb 6.3.3 Fortinet Fortiweb 6.3.4 Fortinet Fortiweb 6.3.5 Fortinet Fortiweb 6.3.6 Fortinet Fortiweb 6.3.7 Fortinet Fortiweb 6.3.8 Fortinet Fortiweb 6.3.9 Fortinet Fortiweb 6.3.10 Fortinet Fortiweb 6.3.11 Fortinet Fortiweb 6.3.12 Fortinet Fortiweb 6.3.13 Fortinet Fortiweb 6.3.14 Fortinet Fortiweb 6.3.15 Fortinet Fortiweb 6.3.16 Fortinet Fortiproxy 7.0.0 Fortinet Fortiproxy 7.0.1 Fortinet Fortiproxy 1.0.0 Fortinet Fortiproxy 1.0.1 Fortinet Fortiproxy 1.0.2 Fortinet Fortiproxy 1.0.3 Fortinet Fortiproxy 1.0.4 Fortinet Fortiproxy 1.0.5 Fortinet Fortiproxy 1.0.6 Fortinet Fortiproxy 1.0.7 Fortinet Fortiproxy 1.1.0 Fortinet Fortiproxy 1.1.1 Fortinet Fortiproxy 1.1.2 Fortinet Fortiproxy 1.1.3 Fortinet Fortiproxy 1.1.4 Fortinet Fortiproxy 1.1.5 Fortinet Fortiproxy 1.1.6 Fortinet Fortiproxy 1.2.0 Fortinet Fortiproxy 1.2.1 Fortinet Fortiproxy 1.2.2 Fortinet Fortiproxy 1.2.3 Fortinet Fortiproxy 1.2.4 Fortinet Fortiproxy 1.2.5 Fortinet Fortiproxy 1.2.6 Fortinet Fortiproxy 1.2.7 Fortinet Fortiproxy 1.2.8 Fortinet Fortiproxy 1.2.9 Fortinet Fortiproxy 1.2.10 Fortinet Fortiproxy 1.2.11 Fortinet Fortiproxy 1.2.12 Fortinet Fortiproxy 1.2.13 Fortinet Fortiproxy 2.0.0 Fortinet Fortiproxy 2.0.1 Fortinet Fortiproxy 2.0.2 Fortinet Fortiproxy 2.0.3 Fortinet Fortiproxy 2.0.4 Fortinet Fortiproxy 2.0.5 Fortinet Fortiproxy 2.0.6 Fortinet Fortiproxy 2.0.7 Fortinet Fortimanager 7.0.0 Fortinet Fortimanager 7.0.1 Fortinet Fortimanager 6.0.0 Fortinet Fortimanager 6.0.1 Fortinet Fortimanager 6.0.2 Fortinet Fortimanager 6.0.3 Fortinet Fortimanager 6.0.4 Fortinet Fortimanager 6.0.5 Fortinet Fortimanager 6.0.6 Fortinet Fortimanager 6.0.7 Fortinet Fortimanager 6.0.8 Fortinet Fortimanager 6.0.9 Fortinet Fortimanager 6.0.10 Fortinet Fortimanager 6.0.11 Fortinet Fortimanager 6.2.0 Fortinet Fortimanager 6.2.1 Fortinet Fortimanager 6.2.2 Fortinet Fortimanager 6.2.3 Fortinet Fortimanager 6.2.4 Fortinet Fortimanager 6.2.5 Fortinet Fortimanager 6.2.6 Fortinet Fortimanager 6.2.7 Fortinet Fortimanager 6.2.8 Fortinet Fortimanager 6.2.9 Fortinet Fortimanager 6.2.10 Fortinet Fortimanager 6.2.11 Fortinet Fortimanager 6.2.12 Fortinet Fortimanager 6.4.0 Fortinet Fortimanager 6.4.1 Fortinet Fortimanager 6.4.2 Fortinet Fortimanager 6.4.3 Fortinet Fortimanager 6.4.4 Fortinet Fortimanager 6.4.5 Fortinet Fortimanager 6.4.6 Fortinet Fortimanager 6.4.7 Fortinet Fortianalyzer 7.0.0 Fortinet Fortianalyzer 7.0.1 Fortinet Fortianalyzer 7.0.2 Fortinet Fortianalyzer 6.0.0 Fortinet Fortianalyzer 6.0.1 Fortinet Fortianalyzer 6.0.2 Fortinet Fortianalyzer 6.0.3 Fortinet Fortianalyzer 6.0.4 Fortinet Fortianalyzer 6.0.5 Fortinet Fortianalyzer 6.0.6 Fortinet Fortianalyzer 6.0.7 Fortinet Fortianalyzer 6.0.8 Fortinet Fortianalyzer 6.0.9 Fortinet Fortianalyzer 6.0.10 Fortinet Fortianalyzer 6.0.11 Fortinet Fortianalyzer 6.2.0 Fortinet Fortianalyzer 6.2.1 Fortinet Fortianalyzer 6.2.2 Fortinet Fortianalyzer 6.2.3 Fortinet Fortianalyzer 6.2.4 Fortinet Fortianalyzer 6.2.5 Fortinet Fortianalyzer 6.2.6 Fortinet Fortianalyzer 6.2.7 Fortinet Fortianalyzer 6.2.8 Fortinet Fortianalyzer 6.2.9 Fortinet Fortianalyzer 6.2.10 Fortinet Fortianalyzer 6.2.11 Fortinet Fortianalyzer 6.2.12 Fortinet Fortianalyzer 6.4.0 Fortinet Fortianalyzer 6.4.1 Fortinet Fortianalyzer 6.4.2 Fortinet Fortianalyzer 6.4.3 Fortinet Fortianalyzer 6.4.4 Fortinet Fortianalyzer 6.4.5 Fortinet Fortianalyzer 6.4.6 Fortinet Fortianalyzer 6.4.7 Fortinet Fortimail 7.0.0 Fortinet Fortimail 7.0.1 Fortinet Fortimail 7.0.2 Fortinet Fortimail 6.4.0 Fortinet Fortimail 6.4.1 Fortinet Fortimail 6.4.2 Fortinet Fortimail 6.4.3 Fortinet Fortimail 6.4.4 Fortinet Fortimail 6.4.5 Fortinet Fortimail 6.4.6 Fortinet Fortimail 5.4.0 Fortinet Fortimail 5.4.1 Fortinet Fortimail 5.4.2 Fortinet Fortimail 5.4.3 Fortinet Fortimail 5.4.4 Fortinet Fortimail 5.4.5 Fortinet Fortimail 5.4.6 Fortinet Fortimail 5.4.7 Fortinet Fortimail 5.4.8 Fortinet Fortimail 5.4.9 Fortinet Fortimail 5.4.10 Fortinet Fortimail 5.4.11 Fortinet Fortimail 5.4.12 Fortinet Fortimail 5.6.1 Fortinet Fortimail 5.6.2 Fortinet Fortimail 5.6.3 Fortinet Fortimail 6.0.0 Fortinet Fortimail 6.0.1 Fortinet Fortimail 6.0.2 Fortinet Fortimail 6.0.3 Fortinet Fortimail 6.0.4 Fortinet Fortimail 6.0.5 Fortinet Fortimail 6.0.6 Fortinet Fortimail 6.0.7 Fortinet Fortimail 6.0.8 Fortinet Fortimail 6.0.9 Fortinet Fortimail 6.0.10 Fortinet Fortimail 6.0.11 Fortinet Fortimail 6.0.12 Fortinet Fortimail 6.2.0 Fortinet Fortimail 6.2.1 Fortinet Fortimail 6.2.2 Fortinet Fortimail 6.2.3 Fortinet Fortimail 6.2.4 Fortinet Fortimail 6.2.5 Fortinet Fortimail 6.2.6 Fortinet Fortimail 6.2.7 Fortinet Fortios 6K7K 6.4.6 Fortinet Fortios 6K7K 6.4.2 Fortinet Fortios 6K7K 6.0.10 Fortinet Fortios 6K7K 6.0.12 Fortinet Fortios 6K7K 6.0.13 Fortinet Fortios 6K7K 6.0.14 Fortinet Fortios 6K7K 6.0.15 Fortinet Fortios 6K7K 6.0.16 Fortinet Fortios 6K7K 6.2.4 Fortinet Fortios 6K7K 6.2.6 Fortinet Fortios 6K7K 6.2.7 Fortinet Fortindr * Fortinet Fortiadc 6.2.0 Fortinet Fortiadc 6.2.1 Fortinet Fortiadc 6.2.2 Fortinet Fortiadc 5.0.0 Fortinet Fortiadc 5.0.1 Fortinet Fortiadc 5.0.2 Fortinet Fortiadc 5.0.3 Fortinet Fortiadc 5.0.4 Fortinet Fortiadc 5.1.0 Fortinet Fortiadc 5.1.1 Fortinet Fortiadc 5.1.2 Fortinet Fortiadc 5.1.3 Fortinet Fortiadc 5.1.4 Fortinet Fortiadc 5.1.5 Fortinet Fortiadc 5.1.6 Fortinet Fortiadc 5.1.7 Fortinet Fortiadc 5.2.0 Fortinet Fortiadc 5.2.1 Fortinet Fortiadc 5.2.2 Fortinet Fortiadc 5.2.3 Fortinet Fortiadc 5.2.4 Fortinet Fortiadc 5.2.5 Fortinet Fortiadc 5.2.6 Fortinet Fortiadc 5.2.7 Fortinet Fortiadc 5.2.8 Fortinet Fortiadc 5.3.0 Fortinet Fortiadc 5.3.1 Fortinet Fortiadc 5.3.2 Fortinet Fortiadc 5.3.3 Fortinet Fortiadc 5.3.4 Fortinet Fortiadc 5.3.5 Fortinet Fortiadc 5.3.6 Fortinet Fortiadc 5.3.7 Fortinet Fortiadc 5.4.0 Fortinet Fortiadc 5.4.1 Fortinet Fortiadc 5.4.2 Fortinet Fortiadc 5.4.3 Fortinet Fortiadc 5.4.4 Fortinet Fortiadc 6.0.0 Fortinet Fortiadc 6.0.1 Fortinet Fortiadc 6.0.2 Fortinet Fortiadc 6.0.3 Fortinet Fortiadc 6.0.4 Fortinet Fortiadc 6.1.0 Fortinet Fortiadc 6.1.1 Fortinet Fortiadc 6.1.2 Fortinet Fortiadc 6.1.3 Fortinet Fortiadc 6.1.4 Fortinet Fortiadc 6.1.5 Fortinet Fortiportal 5.0.0 Fortinet Fortiportal 5.0.1 Fortinet Fortiportal 5.0.2 Fortinet Fortiportal 5.0.3 Fortinet Fortiportal 5.1.0 Fortinet Fortiportal 5.1.1 Fortinet Fortiportal 5.1.2 Fortinet Fortiportal 5.2.0 Fortinet Fortiportal 5.2.1 Fortinet Fortiportal 5.2.2 Fortinet Fortiportal 5.2.3 Fortinet Fortiportal 5.2.4 Fortinet Fortiportal 5.2.5 Fortinet Fortiportal 5.2.6 Fortinet Fortiportal 5.2.7 Fortinet Fortiportal 5.3.0 Fortinet Fortiportal 5.3.1 Fortinet Fortiportal 5.3.2 Fortinet Fortiportal 5.3.3 Fortinet Fortiportal 5.3.4 Fortinet Fortiportal 5.3.5 Fortinet Fortiportal 5.3.6 Fortinet Fortiportal 5.3.7 Fortinet Fortiportal 5.3.8 Fortinet Fortiportal 6.0.0 Fortinet Fortiportal 6.0.1 Fortinet Fortiportal 6.0.2 Fortinet Fortiportal 6.0.3 Fortinet Fortiportal 6.0.4 Fortinet Fortiportal 6.0.5 Fortinet Fortiportal 6.0.6 Fortinet Fortiportal 6.0.7 Fortinet Fortiportal 6.0.8 Fortinet Fortiportal 6.0.9 Fortinet Fortiportal 6.0.10 Fortinet Fortivoice 6.4.0 Fortinet Fortivoice 6.4.1 Fortinet Fortivoice 6.4.2 Fortinet Fortivoice 6.4.3 Fortinet Fortivoice 6.4.4 Fortinet Fortivoice 6.0.0 Fortinet Fortivoice 6.0.1 Fortinet Fortivoice 6.0.2 Fortinet Fortivoice 6.0.3 Fortinet Fortivoice 6.0.4 Fortinet Fortivoice 6.0.5 Fortinet Fortivoice 6.0.6 Fortinet Fortivoice 6.0.7 Fortinet Fortivoice 6.0.8 Fortinet Fortivoice 6.0.9 Fortinet Fortivoice 6.0.10	380
OS	Fortinet Fortinet Fortios 6.2.0 Fortinet Fortios 6.2.1 Fortinet Fortios 6.2.2 Fortinet Fortios 6.2.3 Fortinet Fortios 6.2.4 Fortinet Fortios 6.2.5 Fortinet Fortios 6.2.6 Fortinet Fortios 6.2.7 Fortinet Fortios 6.2.8 Fortinet Fortios 6.2.9 Fortinet Fortios 7.0.1 Fortinet Fortios 6.4.0 Fortinet Fortios 6.4.1 Fortinet Fortios 6.4.2 Fortinet Fortios 6.4.3 Fortinet Fortios 6.4.4 Fortinet Fortios 6.4.5 Fortinet Fortios 6.4.6 Fortinet Fortios 5.0.0 Fortinet Fortios 5.0.1 Fortinet Fortios 5.0.2 Fortinet Fortios 5.0.3 Fortinet Fortios 5.0.4 Fortinet Fortios 5.0.5 Fortinet Fortios 5.0.6 Fortinet Fortios 5.0.7 Fortinet Fortios 5.0.8 Fortinet Fortios 5.0.9 Fortinet Fortios 5.0.10 Fortinet Fortios 5.0.11 Fortinet Fortios 5.0.12 Fortinet Fortios 5.0.13 Fortinet Fortios 5.0.14 Fortinet Fortios 5.2.0 Fortinet Fortios 5.2.1 Fortinet Fortios 5.2.2 Fortinet Fortios 5.2.3 Fortinet Fortios 5.2.4 Fortinet Fortios 5.2.5 Fortinet Fortios 5.2.6 Fortinet Fortios 5.2.7 Fortinet Fortios 5.2.8 Fortinet Fortios 5.2.9 Fortinet Fortios 5.2.10 Fortinet Fortios 5.2.11 Fortinet Fortios 5.2.12 Fortinet Fortios 5.2.13 Fortinet Fortios 5.2.14 Fortinet Fortios 5.2.15 Fortinet Fortios 5.4 Fortinet Fortios 5.4.0 Fortinet Fortios 5.4.1 Fortinet Fortios 5.4.2 Fortinet Fortios 5.4.3 Fortinet Fortios 5.4.4 Fortinet Fortios 5.4.5 Fortinet Fortios 5.4.6 Fortinet Fortios 5.4.7 Fortinet Fortios 5.4.8 Fortinet Fortios 5.4.9 Fortinet Fortios 5.4.10 Fortinet Fortios 5.4.11 Fortinet Fortios 5.4.12 Fortinet Fortios 5.4.13 Fortinet Fortios 5.6.0 Fortinet Fortios 5.6.1 Fortinet Fortios 5.6.2 Fortinet Fortios 5.6.3 Fortinet Fortios 5.6.4 Fortinet Fortios 5.6.5 Fortinet Fortios 5.6.6 Fortinet Fortios 5.6.7 Fortinet Fortios 5.6.8 Fortinet Fortios 5.6.9 Fortinet Fortios 5.6.10 Fortinet Fortios 5.6.11 Fortinet Fortios 5.6.12 Fortinet Fortios 5.6.13 Fortinet Fortios 5.6.14 Fortinet Fortios 6.0.0 Fortinet Fortios 6.0.1 Fortinet Fortios 6.0.2 Fortinet Fortios 6.0.3 Fortinet Fortios 6.0.4 Fortinet Fortios 6.0.5 Fortinet Fortios 6.0.6 Fortinet Fortios 6.0.7 Fortinet Fortios 6.0.8 Fortinet Fortios 6.0.9 Fortinet Fortios 6.0.10 Fortinet Fortios 6.0.11 Fortinet Fortios 6.0.12 Fortinet Fortios 6.0.13 Fortinet Fortiswitch 7.0.0 Fortinet Fortiswitch 7.0.1 Fortinet Fortiswitch 7.0.2 Fortinet Fortiswitch 7.0.3 Fortinet Fortiswitch 6.0.0 Fortinet Fortiswitch 6.0.1 Fortinet Fortiswitch 6.0.2 Fortinet Fortiswitch 6.0.3 Fortinet Fortiswitch 6.0.4 Fortinet Fortiswitch 6.0.5 Fortinet Fortiswitch 6.0.6 Fortinet Fortiswitch 6.0.7 Fortinet Fortiswitch 6.2.0 Fortinet Fortiswitch 6.2.1 Fortinet Fortiswitch 6.2.2 Fortinet Fortiswitch 6.2.3 Fortinet Fortiswitch 6.2.4 Fortinet Fortiswitch 6.2.5 Fortinet Fortiswitch 6.2.6 Fortinet Fortiswitch 6.2.7 Fortinet Fortiswitch 6.4.0 Fortinet Fortiswitch 6.4.1 Fortinet Fortiswitch 6.4.2 Fortinet Fortiswitch 6.4.3 Fortinet Fortiswitch 6.4.4 Fortinet Fortiswitch 6.4.5 Fortinet Fortiswitch 6.4.6 Fortinet Fortiswitch 6.4.7 Fortinet Fortiswitch 6.4.8 Fortinet Fortiswitch 6.4.9 Fortinet Fortirecorder Firmware 6.4.0 Fortinet Fortirecorder Firmware 6.4.1 Fortinet Fortirecorder Firmware 6.4.2 Fortinet Fortirecorder Firmware 2.6.0 Fortinet Fortirecorder Firmware 2.7.0 Fortinet Fortirecorder Firmware 2.7.1 Fortinet Fortirecorder Firmware 2.7.2 Fortinet Fortirecorder Firmware 2.7.3 Fortinet Fortirecorder Firmware 2.7.4 Fortinet Fortirecorder Firmware 2.7.5 Fortinet Fortirecorder Firmware 2.7.6 Fortinet Fortirecorder Firmware 2.7.7 Fortinet Fortirecorder Firmware 6.0.0 Fortinet Fortirecorder Firmware 6.0.1 Fortinet Fortirecorder Firmware 6.0.2 Fortinet Fortirecorder Firmware 6.0.3 Fortinet Fortirecorder Firmware 6.0.4 Fortinet Fortirecorder Firmware 6.0.5 Fortinet Fortirecorder Firmware 6.0.6 Fortinet Fortirecorder Firmware 6.0.7 Fortinet Fortirecorder Firmware 6.0.8 Fortinet Fortirecorder Firmware 6.0.9 Fortinet Fortirecorder Firmware 6.0.10	146

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://fortiguard.com/advisory/FG-IR-21-173

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.