CVE-2021-42756

Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution via specifically crafted HTTP requests.

Affected

Fortinet · FortiWeb

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

34.98% chance of exploitation in the next 30 days, 98th percentile

Published

2023-02-16

Updated

2024-10-23

Proof-of-concept exploits (1)

• 3ndorph1n/CVE-2021-427560★ · 2023-02-23

Security advisories

• https://fortiguard.com/psirt/FG-IR-21-186

References

• CVE Record
• NVD entry