PT-2021-15646 · Fortinet · Fortimanager

Published 2021-09-30 · Updated 2021-10-08 · CVE-2021-24016

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions 6.4.3 and below Fortinet FortiManager versions 6.2.7 and below

Description: The issue is related to the improper neutralization of formula elements in a csv file. This allows an attacker to execute arbitrary commands via a crafted IPv4 field in the policy name when the file is exported as an Excel file and opened unsafely on the victim host.

Recommendations: For Fortinet FortiManager versions 6.4.3 and below, consider updating to a version above 6.4.3 to resolve the issue. For Fortinet FortiManager versions 6.2.7 and below, consider updating to a version above 6.2.7 to resolve the issue. As a temporary workaround, consider avoiding the export of policy names with crafted IPv4 fields to Excel files until a patch is available. Restrict access to the csv file export feature to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-1236

Related Identifiers

CVE-2021-24016

Affected Products

Fortimanager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-24016 · Security Note
• https://fortiguard.com/advisory/FG-IR-20-190 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-24016 · Vendor Advisory
• https://t.me/cibsecurity/29734 · Telegram Post
• https://t.me/cvenotify/22130 · Telegram Post