VULNERABILITY INTELLIGENCE

CVE-2021-22127

CVSS score7.1 HIGH
EPSS probability0.51%
CISA KEVNot currently listed
Published2022-04-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow an unauthenticated attacker to execute arbitrary code on the host operating system as root via tricking the user into connecting to a network with a malicious name.

Weakness classification

  • nvd@nist.gov: CWE-78

Primary references