VULNERABILITY INTELLIGENCE

CVE-2021-26112

CVSS score8.1 HIGH
EPSS probability1.75%
CISA KEVNot currently listed
Published2022-04-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentially corrupt control data in memory and execute arbitrary code via specifically crafted requests.

Weakness classification

  • nvd@nist.gov: CWE-787

Primary references