Actively exploited · Published Jan 4, 2022 · Assigned by fortinet

CVE-2021-44168

Low 3.3 Exploited

In plain English

A low-severity security flaw in Fortinet FortiOS from Fortinet. Attackers are actively exploiting it in the wild (listed by CISA on December 10, 2021). The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply updates per vendor instructions.

Severity (CVSS 3.1)3.3Low

Exploit odds (30 days)0.9%top 40.0% of all CVEs

Exploited in the wildYesCISA KEV since Dec 10, 2021

Attack tooling1Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Dec 24, 2021.

Official description

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.

Affected products (as reported)

Vendor	Product	Versions
Fortinet	Fortinet FortiOS	FortiOS before 7.0.3

Weakness: CWE-494 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:U/RC:C

References

https://fortiguard.com/psirt/FG-IR-21-201 x_refsource_CONFIRM
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44168 government-resource