CVE-2021-36194 — Fortinet / Fortinet FortiWeb

CVE-2021-36194

Fortinet / Fortinet FortiWeb PUBLISHED

Description (CNA)

Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiWeb	affected FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-21-152

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-21-152

CISA-ADP

No English description supplied.

No references supplied.