CVE-2021-26105 — Fortinet / FortiSandbox

CVE-2021-26105

Fortinet / FortiSandbox PUBLISHED

Description (CNA)

A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and below may allow an authenticated attacker to potentially execute unauthorized code or commands via specifically crafted HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSandbox	affected 3.2.2; affected 3.1.4

CWE

CWE-358

References

https://fortiguard.fortinet.com/psirt/FG-IR-20-234

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.