VULNERABILITY INTELLIGENCE

CVE-2021-22125

CVSS score6.3 MEDIUM
EPSS probability1.41%
CISA KEVNot currently listed
Published2021-07-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Description

An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated administrator to execute commands on the underlying system's shell via altering the content of its configuration file.

Weakness classification

  • nvd@nist.gov: CWE-78

Primary references