Record status Published
Identifier year (not publication year) 2021
Source publication Feb 2, 2022
Source updated Jan 13, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
FortiFone
Vendor Fortinet
Product FortiFone
Platforms Unknown
Default status unaffected
FortiFone · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
3.0.0 affectedsemver Unavailable 3.0.11 None listed
FortiADC
Vendor Fortinet
Product FortiADC
Platforms Unknown
Default status unaffected
FortiADC · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
7.0.0 affectedUnavailable Unavailable Unavailable None listed 6.2.0 affectedsemver Unavailable 6.2.2 None listed 6.1.0 affectedsemver Unavailable 6.1.6 None listed 6.0.0 affectedsemver Unavailable 6.0.4 None listed 5.4.0 affectedsemver Unavailable 5.4.5 None listed 5.3.0 affectedsemver Unavailable 5.3.7 None listed 5.2.0 affectedsemver Unavailable 5.2.8 None listed 5.1.0 affectedsemver Unavailable 5.1.7 None listed 5.0.0 affectedsemver Unavailable 5.0.4 None listed
FortiMail
Vendor Fortinet
Product FortiMail
Platforms Unknown
Default status unaffected
FortiMail · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
7.0.0 affectedsemver Unavailable 7.0.2 None listed 6.4.0 affectedsemver Unavailable 6.4.6 None listed 6.2.0 affectedsemver Unavailable 6.2.8 None listed 6.0.0 affectedsemver Unavailable 6.0.12 None listed 5.4.0 affectedsemver Unavailable 5.4.12 None listed
FortiDDoS
Vendor Fortinet
Product FortiDDoS
Platforms Unknown
Default status unaffected
FortiDDoS · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
5.7.0 affectedUnavailable Unavailable Unavailable None listed 5.6.0 affectedsemver Unavailable 5.6.1 None listed 5.5.0 affectedsemver Unavailable 5.5.1 None listed 5.4.0 affectedsemver Unavailable 5.4.3 None listed 5.3.0 affectedsemver Unavailable 5.3.2 None listed 5.2.0 affectedUnavailable Unavailable Unavailable None listed 5.1.0 affectedUnavailable Unavailable Unavailable None listed 5.0.0 affectedUnavailable Unavailable Unavailable None listed 4.7.0 affectedUnavailable Unavailable Unavailable None listed 4.6.0 affectedUnavailable Unavailable Unavailable None listed 4.5.0 affectedUnavailable Unavailable Unavailable None listed 4.4.0 affectedsemver Unavailable 4.4.2 None listed
FortiDDoS-F
Vendor Fortinet
Product FortiDDoS-F
Platforms Unknown
Default status unaffected
FortiDDoS-F · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
6.3.0 affectedUnavailable Unavailable Unavailable None listed 6.2.0 affectedsemver Unavailable 6.2.2 None listed 6.1.0 affectedsemver Unavailable 6.1.4 None listed
FortiVoice
Vendor Fortinet
Product FortiVoice
Platforms Unknown
Default status unaffected
FortiVoice · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
6.4.0 affectedsemver Unavailable 6.4.4 None listed 6.0.0 affectedsemver Unavailable 6.0.10 None listed
FortiDDoS-CM
Vendor Fortinet
Product FortiDDoS-CM
Platforms Unknown
Default status unaffected
FortiDDoS-CM · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
5.5.0 affectedsemver Unavailable 5.5.1 None listed 5.4.0 affectedsemver Unavailable 5.4.3 None listed 5.3.0 affectedsemver Unavailable 5.3.1 None listed 5.2.0 affectedUnavailable Unavailable Unavailable None listed 5.1.0 affectedUnavailable Unavailable Unavailable None listed 5.0.0 affectedUnavailable Unavailable Unavailable None listed 4.7.0 affectedUnavailable Unavailable Unavailable None listed
FortiWeb
Vendor Fortinet
Product FortiWeb
Platforms Unknown
Default status unaffected
FortiWeb · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
6.4.0 affectedsemver Unavailable 6.4.1 None listed 6.3.0 affectedsemver Unavailable 6.3.15 None listed
FortiRecorder
Vendor Fortinet
Product FortiRecorder
Platforms Unknown
Default status unaffected
FortiRecorder · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
6.4.0 affectedsemver Unavailable 6.4.2 None listed 6.0.0 affectedsemver Unavailable 6.0.10 None listed 2.7.0 affectedsemver Unavailable 2.7.7 None listed 2.6.0 affectedsemver Unavailable 2.6.3 None listed
FortiNDR
Vendor Fortinet
Product FortiNDR
Platforms Unknown
Default status unaffected
FortiNDR · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
1.5.0 affectedsemver Unavailable 1.5.3 None listed 1.4.0 affectedUnavailable Unavailable Unavailable None listed 1.3.0 affectedsemver Unavailable 1.3.1 None listed 1.2.0 affectedUnavailable Unavailable Unavailable None listed 1.1.0 affectedUnavailable Unavailable Unavailable None listed