medium6.6
CVE-2022-33871
A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privilege…
Impact
A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI `execute backup-local rename` and `execute backup-local show` operations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiweb | from 6.3.6 before 6.3.20 Versions 6.4.0, 6.4.1, 6.4.2, 7.0.0, 7.0.1 |