CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-01-04
Fortinet FortiOS Missing Integrity Check Arbitrary File Download and Local Privilege Escalation Vulnerability (CVE-2021-44168) Security Advisory
[Affected Scope] FortiOS versions prior to 7.0.3 utilizing the 'execute restore src-vis' command
[Impact] A local authenticated attacker can download arbitrary files onto the device via specially crafted update packages, compromising system integrity
[Mitigation] Immediately upgrade FortiOS to version 7.0.3 or higher, and restrict local administrator CLI privileges