CVEvulnerability

CVE-2021-26096

8.8 HIGH Published 2021-08-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-08-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-787

Description

Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command line arguments.

Affected configurations

• fortinet fortisandbox (<= 3.1.4) • fortinet fortisandbox (>= 3.2.0 < 3.2.3)

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References