CVE-2021-36193

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Feb 2, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-361948.8Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated a CVE-2021-361958.8Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 th CVE-2021-361987.5Successful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.CVE-2021-361995.3Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop.CVE-2021-36205.5A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclose CVE-2021-362005.3Under certain circumstances an unauthenticated user could access the the web API for Metasys ADS/ADX/OAS 10 versions prior to 10.1.6 and 11 CVE-2021-362015.3Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versions.CVE-2021-362028.8Server-Side Request Forgery (SSRF) vulnerability in Johnson Controls Metasys could allow an authenticated attacker to inject malicious code CVE-2021-362039.1The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request.CVE-2021-362047.5Under some circumstances an Insufficiently Protected Credentials vulnerability in Johnson Controls Metasys ADS/ADX/OAS 10 versions prior to CVE-2021-362059.8Under certain circumstances the session token is not cleared on logout.CVE-2021-362066.1All versions of CEVAS prior to 1.01.46 do not sufficiently validate user-controllable input and could allow a user to bypass authentication