CVE-2021-26104
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and below, 5.3.5 and below and 6.0.4 and below may allow a local authenticated and unprivileged user to execute arbitrary shell commands as root via specifically crafted CLI command parameters.
Múltiples vulnerabilidades de inyección de comandos en el Sistema Operativo (CWE-78) en la interfaz de línea de comandos de FortiManager versiones 6.2.7 y anteriores, 6.4.5 y anteriores y todas las versiones de 6.2.x, 6.0.x y 5.6.x, FortiAnalyzer versiones 6.2.7 y anteriores, 6.4.5 y anteriores y todas las versiones de 6. 2.x, 6.0.x y 5.6.x, y FortiPortal versiones 5.2.5 y anteriores, 5.3.5 y anteriores y 6.0.4 y anteriores, pueden permitir a un usuario local autenticado no privilegiado ejecutar comandos shell arbitrarios como root por medio de parámetros de comando CLI específicamente diseñados
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2021-01-25 CVE Reserved
- 2022-04-06 CVE Published
- 2024-09-05 EPSS Updated
- 2024-10-25 CVE Updated
- 2024-10-25 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (2)
URL | Tag | Source |
---|
URL | Date | SRC |
---|---|---|
https://github.com/orangecertcc/security-research/security/advisories/GHSA-f73m-fvj3-m2pm | 2024-10-25 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://fortiguard.com/advisory/FG-IR-21-037 | 2022-07-28 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Fortinet Search vendor "Fortinet" | Fortianalyzer Search vendor "Fortinet" for product "Fortianalyzer" | >= 5.6.0 < 6.0.11 Search vendor "Fortinet" for product "Fortianalyzer" and version " >= 5.6.0 < 6.0.11" | - |
Affected
| ||||||
Fortinet Search vendor "Fortinet" | Fortianalyzer Search vendor "Fortinet" for product "Fortianalyzer" | >= 6.2.0 < 6.2.8 Search vendor "Fortinet" for product "Fortianalyzer" and version " >= 6.2.0 < 6.2.8" | - |
Affected
| ||||||
Fortinet Search vendor "Fortinet" | Fortianalyzer Search vendor "Fortinet" for product "Fortianalyzer" | >= 6.4.0 < 6.4.6 Search vendor "Fortinet" for product "Fortianalyzer" and version " >= 6.4.0 < 6.4.6" | - |
Affected
| ||||||
Fortinet Search vendor "Fortinet" | Fortimanager Search vendor "Fortinet" for product "Fortimanager" | >= 5.6.0 < 6.0.11 Search vendor "Fortinet" for product "Fortimanager" and version " >= 5.6.0 < 6.0.11" | - |
Affected
| ||||||
Fortinet Search vendor "Fortinet" | Fortimanager Search vendor "Fortinet" for product "Fortimanager" | >= 6.2.0 < 6.2.8 Search vendor "Fortinet" for product "Fortimanager" and version " >= 6.2.0 < 6.2.8" | - |
Affected
| ||||||
Fortinet Search vendor "Fortinet" | Fortimanager Search vendor "Fortinet" for product "Fortimanager" | >= 6.4.0 < 6.4.6 Search vendor "Fortinet" for product "Fortimanager" and version " >= 6.4.0 < 6.4.6" | - |
Affected
| ||||||
Fortinet Search vendor "Fortinet" | Fortiportal Search vendor "Fortinet" for product "Fortiportal" | < 5.2.6 Search vendor "Fortinet" for product "Fortiportal" and version " < 5.2.6" | - |
Affected
| ||||||
Fortinet Search vendor "Fortinet" | Fortiportal Search vendor "Fortinet" for product "Fortiportal" | >= 5.3.0 < 5.3.6 Search vendor "Fortinet" for product "Fortiportal" and version " >= 5.3.0 < 5.3.6" | - |
Affected
| ||||||
Fortinet Search vendor "Fortinet" | Fortiportal Search vendor "Fortinet" for product "Fortiportal" | >= 6.0.0 < 6.0.5 Search vendor "Fortinet" for product "Fortiportal" and version " >= 6.0.0 < 6.0.5" | - |
Affected
|