ID
VAR-202109-0501
CVE
CVE-2021-36179
TITLE
Fortinet FortiWeb Out-of-bounds write vulnerability in
Trust: 0.8
DESCRIPTION
A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute unauthorized code or commands via crafted parameters in CLI command execution. Fortinet FortiWeb Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Fortinet FortiWeb is a web application layer firewall developed by Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, etc., to ensure the security of web applications and protect sensitive database content. FortiWeb has a buffer error vulnerability that stems from multiple stack-based buffer overflow vulnerabilities in the FortiWeb CLI interface
Trust: 1.8
AFFECTED PRODUCTS
| vendor: | fortinet | model: | fortiweb | scope: | lte | version: | 6.2.4 | Trust: 1.0 |
| vendor: | fortinet | model: | fortiweb | scope: | lte | version: | 6.3.14 | Trust: 1.0 |
| vendor: | fortinet | model: | fortiweb | scope: | gte | version: | 6.3.0 | Trust: 1.0 |
| vendor: | フォーティネット | model: | fortiweb | scope: | lte | version: | 6.3.14 and earlier | Trust: 0.8 |
| vendor: | フォーティネット | model: | fortiweb | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | フォーティネット | model: | fortiweb | scope: | lte | version: | 6.2.4 and earlier | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-787 | Trust: 1.1 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
buffer error
Trust: 0.6
PATCH
| title: | FG-IR-20-206 | url: | https://www.fortiguard.com/psirt/FG-IR-20-206 | Trust: 0.8 |
| title: | Fortinet FortiWeb Buffer error vulnerability fix | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=162582 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-36179 | Trust: 3.4 |
| db: | JVNDB | id: | JVNDB-2021-011438 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202109-363 | Trust: 0.7 |
| db: | AUSCERT | id: | ESB-2021.3006 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-397304 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2021-36179 | Trust: 0.1 |
REFERENCES
| url: | https://fortiguard.com/advisory/fg-ir-20-206 | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-36179 | Trust: 0.8 |
| url: | https://www.auscert.org.au/bulletins/esb-2021.3006 | Trust: 0.6 |
| url: | https://cwe.mitre.org/data/definitions/787.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | VULHUB | id: | VHN-397304 |
| db: | VULMON | id: | CVE-2021-36179 |
| db: | JVNDB | id: | JVNDB-2021-011438 |
| db: | CNNVD | id: | CNNVD-202109-363 |
| db: | NVD | id: | CVE-2021-36179 |
LAST UPDATE DATE
2024-08-14T14:37:53.162000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-397304 | date: | 2021-09-14T00:00:00 |
| db: | VULMON | id: | CVE-2021-36179 | date: | 2021-09-14T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-011438 | date: | 2022-07-29T07:05:00 |
| db: | CNNVD | id: | CNNVD-202109-363 | date: | 2021-09-15T00:00:00 |
| db: | NVD | id: | CVE-2021-36179 | date: | 2021-09-14T17:34:45.290 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-397304 | date: | 2021-09-08T00:00:00 |
| db: | VULMON | id: | CVE-2021-36179 | date: | 2021-09-08T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-011438 | date: | 2022-07-29T00:00:00 |
| db: | CNNVD | id: | CNNVD-202109-363 | date: | 2021-09-08T00:00:00 |
| db: | NVD | id: | CVE-2021-36179 | date: | 2021-09-08T11:15:07.407 |