← Database

CVE-2021-36173

HIGH CVSS: 8.0 Published: 2021-12-08 Modified: 2026-06-17

Description

A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13 may allow an attacker to execute arbitrary code via specially crafted installation images.

Affected Platforms

Fortinet Fortigate-400EFortinet Fortigate-200FFortinet Fortigate-2600FFortinet Fortigate 2200EFortinet Fortigate 3600EFortinet Fortigate 60FFortinet Fortigate 7121FFortinet Fortigate-1100EFortinet Fortigate-3500FFortinet Fortigate 1800F

Weakness Type

CWE-787

References