PT-2025-12658 · Fortinet · Fortisandbox

Publicado 2025-03-24 · Atualizado 2025-03-24 · CVE-2021-26105

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 3.2.2 and below FortiSandbox versions 3.1.4 and below

Description A stack-based buffer overflow issue in the profile parser may allow an authenticated attacker to potentially execute unauthorized code or commands via specifically crafted HTTP requests.

Recommendations For FortiSandbox versions 3.2.2 and below, update to a version above 3.2.2 to resolve the issue. For FortiSandbox versions 3.1.4 and below, update to a version above 3.1.4 to resolve the issue. As a temporary workaround, consider restricting access to the profile parser to minimize the risk of exploitation.

Correção

Improperly Implemented Security Check for Standard

Enumeração de Fraquezas

CWE-358

Identificadores relacionados

CVE-2021-26105

Produtos afetados

Fortisandbox

Referências · 6

• https://fortiguard.fortinet.com/psirt/FG-IR-20-234 · Nota
• https://twitter.com/CVEnew/status/1904199157424042042 · Publicação no Twitter
• https://t.me/cvedetector/20980 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2021-26105 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-26105 · Nota de Segurança
• https://t.me/cvetracker/19770 · Publicação no Telegram