CVE-2021-42757

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-787

Affected software

VendorProductVersions
FortinetFortiOS>= 7.0.0, <= 7.0.2; >= 6.4.0, <= 6.4.7; >= 6.2.0, <= 6.2.9; >= 6.0.0, <= 6.0.13; >= 5.6.0, <= 5.6.14; >= 5.4.0, <= 5.4.13; >= 5.2.0, <= 5.2.15; >= 5.0.0, <= 5.0.14
FortinetFortiDDoS-F>= 6.4.0, <= 6.4.1; 6.3.0; >= 6.2.0, <= 6.2.2; >= 6.1.0, <= 6.1.4
FortinetFortiVoice>= 6.4.0, <= 6.4.4; >= 6.0.0, <= 6.0.10
FortinetFortiProxy>= 7.0.0, <= 7.0.1; >= 2.0.0, <= 2.0.7; >= 1.2.0, <= 1.2.13; >= 1.1.0, <= 1.1.6; >= 1.0.0, <= 1.0.7
FortinetFortiRecorder>= 6.4.0, <= 6.4.2; >= 6.0.0, <= 6.0.10; >= 2.7.0, <= 2.7.7; >= 2.6.0, <= 2.6.3
FortinetFortiPortal>= 6.0.0, <= 6.0.10; >= 5.3.0, <= 5.3.8; >= 5.2.0, <= 5.2.6; >= 5.1.0, <= 5.1.2; >= 5.0.0, <= 5.0.3
FortinetFortiMail>= 7.0.0, <= 7.0.2; >= 6.4.0, <= 6.4.6; >= 6.2.0, <= 6.2.7; >= 6.0.0, <= 6.0.12; >= 5.4.0, <= 5.4.12
FortinetFortiAnalyzer>= 7.0.0, <= 7.0.2; >= 6.4.0, <= 6.4.7; >= 6.2.0, <= 6.2.13; >= 6.0.0, <= 6.0.12
FortinetFortiNDR>= 1.5.0, <= 1.5.2; 1.4.0; >= 1.3.0, <= 1.3.1; 1.2.0; 1.1.0
FortinetFortiDDoS>= 5.5.0, <= 5.5.1; >= 5.4.0, <= 5.4.3; >= 5.3.0, <= 5.3.2; 5.2.0; 5.1.0; 5.0.0; 4.7.0; 4.6.0; 4.5.0; >= 4.4.0, <= 4.4.2
FortinetFortiSwitch>= 7.0.0, <= 7.0.3; >= 6.4.0, <= 6.4.9; >= 6.2.0, <= 6.2.7; >= 6.0.0, <= 6.0.7
FortinetFortiADC>= 6.2.0, <= 6.2.2; >= 6.1.0, <= 6.1.5; >= 6.0.0, <= 6.0.4; >= 5.4.0, <= 5.4.5; >= 5.3.0, <= 5.3.7; >= 5.2.0, <= 5.2.8; >= 5.1.0, <= 5.1.7; >= 5.0.0, <= 5.0.4
FortinetFortiWeb>= 6.4.0, <= 6.4.1; >= 6.3.0, <= 6.3.16; >= 6.2.0, <= 6.2.8; >= 6.1.0, <= 6.1.4; >= 6.0.0, <= 6.0.8; >= 5.9.0, <= 5.9.2; >= 5.8.5, <= 5.8.7; >= 5.8.0, <= 5.8.3; >= 5.7.0, <= 5.7.3; >= 5.6.0, <= 5.6.2; >= 5.5.0, <= 5.5.7; >= 5.4.0, <= 5.4.1; >= 5.3.0, <= 5.3.9; >= 5.2.0, <= 5.2.4; >= 5.1.0, <= 5.1.4; >= 5.0.0, <= 5.0.6
FortinetFortiManager>= 7.0.0, <= 7.0.2; >= 6.4.0, <= 6.4.7; >= 6.2.0, <= 6.2.13; >= 6.0.0, <= 6.0.12

References

Timeline

Published
Dec 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-427588.8An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low priviCVE-2021-427596.7A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauCVE-2021-42768.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue isCVE-2021-427608.8A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.1 and below allows aCVE-2021-427619.8A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6.3.CVE-2021-427625.3BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick hoCVE-2021-427637.5Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The issue occurs when the cluster manager forwCVE-2021-427649.1The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (delayed consensus CVE-2021-427657.5The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to leverage network delay to cause a denial of sCVE-2021-427669.1The Proof-of-Stake (PoS) Ethereum consensus protocol through 2021-10-19 allows an adversary to cause a denial of service (long-range consensCVE-2021-427679.1A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and somCVE-2021-42775.3A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the f
CVE-2021-42757: Medium severity, CVSS 6.7 | Vulnix