CVE-2021-44170

Name of the Vulnerable Software and Affected Versions FortiOS versions prior to 7.0.4 FortiProxy versions prior to 2.0.8

Description A stack-based buffer overflow vulnerability in the command line interpreter of FortiOS and FortiProxy may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments.

Recommendations For FortiOS versions prior to 7.0.4, update to version 7.0.4 or later to resolve the issue. For FortiProxy versions prior to 2.0.8, update to version 2.0.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the command line interpreter until a patch is available.