Buffer Overflow Vulnerability in Fortinet FortiOS TFTP Client Library

CVE-2021-42757

What is CVE-2021-42757?

A vulnerable buffer overflow in the TFTP client library of Fortinet's FortiOS allows an authenticated local attacker to execute arbitrary code. This vulnerability affects versions prior to 6.4.7 and versions from 7.0.0 to 7.0.2. Attackers can exploit this issue by sending specially crafted command line arguments, potentially compromising system integrity and leading to unauthorized access. It is critical for users of the affected FortiOS versions to update to the latest releases and implement necessary security measures.

References