Vulnerability · Published Dec 19, 2024 · Assigned by fortinet

CVE-2021-26102

Critical 9.8

In plain English

A critical-severity security flaw in FortiWAN from Fortinet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 19.7% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)19.7%top 2.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting specific configuration files will reset the Admin password to its default value.

Affected products (as reported)

Vendor	Product	Versions
Fortinet	FortiWAN	4.5.0 – through 4.5.74.4.0 – through 4.4.1

Weakness: CWE-305 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C

References

https://fortiguard.fortinet.com/psirt/FG-IR-21-048