VULNERABILITY INTELLIGENCE

CVE-2021-24016

CVSS score3.7 LOW
EPSS probability0.50%
CISA KEVNot currently listed
Published2021-09-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in policy name, when exported as excel file and opened unsafely on the victim host.

Weakness classification

  • nvd@nist.gov: CWE-1236

Primary references