CVE-2021-44168

LOW KEV

Fortinet Fortios < 6.0.14 - Download Without Integrity Check

Title source: rule

Description

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.

Exploits (1)

nomisec WORKING POC 21 stars
by 0xhaggis · remote
https://github.com/0xhaggis/CVE-2021-44168

References (2)

Scores

CVSS v3 3.3
EPSS 0.0107
EPSS Percentile 77.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

CISA KEV 2021-12-10
VulnCheck KEV 2021-12-07
InTheWild.io 2021-12-07
ENISA EUVD EUVD-2021-31018
CWE
CWE-494
Status published
Products (1)
fortinet/fortios < 6.0.14
Published Jan 04, 2022
KEV Added Dec 10, 2021
Tracked Since Feb 18, 2026