Stack-Based Buffer Overflow in FortiWeb Command Line Interface

CVE-2021-36193

What is CVE-2021-36193?

FortiWeb prior to version 6.4.2 has multiple vulnerabilities within its command line interpreter that may allow an authenticated attacker to exploit stack-based buffer overflows. By sending specially crafted commands, the attacker could execute arbitrary code, potentially compromising the security of the affected system.

References