CVE-2021-42757

No fix known EPSS <1%CVSS 6.3

A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.

Published 2021-12-08 · CVE record · OSV

Products: Fortinet FortiOS, Fortinet FortiDDoS-F, Fortinet FortiVoice, Fortinet FortiProxy, Fortinet FortiRecorder, Fortinet FortiPortal, Fortinet FortiMail, Fortinet FortiAnalyzer, Fortinet FortiNDR, Fortinet FortiDDoS, Fortinet FortiSwitch, Fortinet FortiADC, Fortinet FortiWeb, Fortinet FortiManager