Advisories · Technology

Fortinet FortiWAN.

Every CVE that names Fortinet FortiWAN among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-26102 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Fortinet FortiWAN: A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below…
- Fortinet FortiWAN
- CWE-305
Not analysed yet 19 Dec 2024
CVE-2021-26115 CVE record

CVSS 7.6 High

OS command injection in Fortinet FortiWAN
- Fortinet FortiWAN
- Command injection
Not analysed yet 19 Dec 2024
CVE-2023-44251 CVE record

CVSS 8.1 High

Path traversal in Fortinet FortiWAN
- Fortinet FortiWAN
- Path traversal
Not analysed yet 13 Dec 2023
CVE-2023-44252 CVE record

CVSS 8.6 High

Improper authentication in Fortinet FortiWAN
- Fortinet FortiWAN
- Authentication bypass
Not analysed yet 13 Dec 2023
CVE-2022-33869 CVE record

CVSS 8.0 High

OS command injection in Fortinet FortiWAN
- Fortinet FortiWAN
- Command injection
Not analysed yet 16 Feb 2023
CVE-2021-26113 CVE record

CVSS 6.2 Medium

A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess…
- Fortinet FortiWAN
Not analysed yet 6 Apr 2022
CVE-2021-32585 CVE record

CVSS 7.2 High

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically c…
- Fortinet FortiWAN
Not analysed yet 6 Apr 2022
CVE-2021-32593 CVE record

CVSS 6.5 Medium

A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge pr…
- Fortinet FortiWAN
Not analysed yet 6 Apr 2022
CVE-2021-24009 CVE record

CVSS 7.2 High

Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary co…
- Fortinet FortiWAN
Not analysed yet 6 Apr 2022
CVE-2021-26114 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via…
- Fortinet FortiWAN
Not analysed yet 6 Apr 2022
CVE-2021-26112 CVE record

CVSS 8.1 High

Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentiall…
- Fortinet FortiWAN
Not analysed yet 6 Apr 2022