← Database

CVE-2021-44168

LOW CVSS: 3.3 Published: 2022-01-04 Modified: 2026-06-17

Description

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.

Affected Platforms

Fortinet Fortios

Weakness Type

CWE-494, CWE-494

References