A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all version

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• fortinet forticamera firmware1.1.0 and later · up to 1.1.5 inclusive
• fortinet forticamera firmware2.0.0 and later · up to 2.1.3 inclusive
• fortinet fortimail7.4.0 and later · before 7.4.5
• fortinet fortimail7.6.0 and later · before 7.6.3
• fortinet fortimail7.0.0 and later · before 7.0.9
• fortinet fortimail7.2.0 and later · before 7.2.8
• fortinet fortindr7.4.0 and later · before 7.4.8
• fortinet fortindr7.2.0 and later · before 7.2.5
• fortinet fortindr7.0.0 and later · before 7.0.7
• fortinet fortindr1.1.0
• fortinet fortindr1.2.0
• fortinet fortindr1.3.0
• fortinet fortindr1.4.0
• fortinet fortindr1.5.0
• fortinet fortindr7.1.0
• fortinet fortindr7.1.1
• fortinet fortindr7.6.0
• fortinet fortirecorder7.2.0 and later · before 7.2.4
• fortinet fortirecorder6.4.0 and later · before 6.4.6
• fortinet fortirecorder7.0.0 and later · before 7.0.6

Versions reported by the vendor

Affected version ranges reported by the assigning authority (fortinet). Independent of NVD's CPE analysis and usually ahead of it.

• Fortinet FortiCamera

  • 2.0.0affected
  • 2.1.0 and later · up to and including 2.1.3affected · semver
  • 1.1.0 and later · up to and including 1.1.5affected · semver

• Fortinet FortiMail

  • 7.6.0 and later · up to and including 7.6.2affected · semver
  • 7.4.0 and later · up to and including 7.4.4affected · semver
  • 7.2.0 and later · up to and including 7.2.7affected · semver
  • 7.0.0 and later · up to and including 7.0.8affected · semver

• Fortinet FortiNDR

  • 7.6.0, 1.4.0, 1.2.0, 1.1.0affected
  • 7.4.0 and later · up to and including 7.4.7affected · semver
  • 7.2.0 and later · up to and including 7.2.4affected · semver
  • 7.1.0 and later · up to and including 7.1.1affected · semver
  • 7.0.0 and later · up to and including 7.0.6affected · semver
  • 1.5.0 and later · up to and including 1.5.3affected · semver
  • 1.3.0 and later · up to and including 1.3.1affected · semver

• Fortinet FortiRecorder

  • 7.2.0 and later · up to and including 7.2.3affected · semver
  • 7.0.0 and later · up to and including 7.0.5affected · semver
  • 6.4.0 and later · up to and including 6.4.5affected · semver

• Fortinet FortiVoice

  • 7.2.0affected
  • 7.0.0 and later · up to and including 7.0.6affected · semver
  • 6.4.0 and later · up to and including 6.4.10affected · semver

Other highest-scoring records for the same primary product.

• CVE-2020-9294An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a
  62This week
• CVE-2023-47539An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may al
  39Monitor
• CVE-2021-32586An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker
  39Monitor
• CVE-2021-36166An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative accou
  39Monitor
• CVE-2021-24020A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 ma
  39Monitor
• CVE-2021-24007Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated
  39Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.