VULNERABILITY INTELLIGENCE

CVE-2021-44168

CVSS score3.3 LOW
EPSS probability0.91%
CISA KEVKnown exploited vulnerability
Published2022-01-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Known Exploited Vulnerability

Fortinet FortiOS Arbitrary File Download

Vendor / product: Fortinet / FortiOS

Description

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.

Weakness classification

  • nvd@nist.gov: CWE-494
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-494

Primary references