Lucene search

FortinetCVE-2021-42759

HistoryDec 09, 2021 - 10:15 a.m.

CVE-2021-42759

2021-12-0910:15:11

CWE-78

fortinet

web.nvd.nist.gov

cve-2021-42759

fortinet meru ap

security vulnerability

unauthorized code execution

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

13.1%

JSON

A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands.

Affected configurations

Nvd

Node

fortinetmeru_firmwareRange8.5.0–8.5.5

fortinetmeru_firmwareRange8.6.0–8.6.2

AND

fortinetmeruMatch-

VendorProductVersionCPE
fortinetmeru_firmware*cpe:2.3:o:fortinet:meru_firmware:*:*:*:*:*:*:*:*
fortinetmeru-cpe:2.3:h:fortinet:meru:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fortinet	meru_firmware	*	cpe:2.3:o:fortinet:meru_firmware::::::::
fortinet	meru	-	cpe:2.3:h:fortinet:meru:-:::::::*

CNA Affected

[
  {
    "product": "Fortinet Meru AP",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "Meru AP 8.6.1, 8.6.0, 8.5.5, 8.5.4, 8.5.3, 8.5.2, 8.5.1, 8.5.0"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-21-004

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

13.1%

JSON

Related for CVE-2021-42759