What is CVE-2021-26112?

CVE-2021-26112 is a high-severity vulnerability in Fortinet Fortiwan, classified under Out-of-bounds Write. CVSS score: 8.1/10. Published 2022-04-06.

How severe is CVE-2021-26112?

High severity. CVSS v3 base score is 8.1 out of 10.

Buffer overflow in Fortinet Fortiwan

CVE-2021-26112

Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentially corrupt control data in memory and execute arbitrary code via specifically crafted requests.

Vulnerability class: Buffer Overflow

EPSS: 0.016 (74.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Fortinet Fortiwan — versions FortiWAN before 4.5.9
Fortinet Fortiwan

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

psirt@fortinet.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2021-26112?: CVE-2021-26112 is a high-severity vulnerability in Fortinet Fortiwan, classified under Out-of-bounds Write. CVSS score: 8.1/10. Published 2022-04-06.
How severe is CVE-2021-26112?: High severity. CVSS v3 base score is 8.1 out of 10.