Integer overflow in Fortinet FortiSwitch, FortiRecorder, FortiVoiceEnterprise, FortiOS…
Priority LOW 20CWE-190Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 and below; FortiOS 7.0.2 and below, 6.4.8 and below, 6.2.10 and below, 6.0.x; FortiProxy 7.0.0, 2.0.6 and below, 1.2.x, 1.1.x, 1.0.x; FortiVoiceEnterprise 6.4.3 and below, 6.0.10 and below dhcpd daemon may allow an unauthenticated and network adjacent attacker to crash the dhcpd deamon, resulting in potential denial of service.
Why it matters now
EPSS 0.004 34th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Fortinet | Fortinet FortiSwitch, FortiRecorder, FortiVoiceEnterprise, FortiOS, FortiProxy | FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 and below; FortiOS 7.0.2 and below, 6.4.8 and below, 6.2.10 and below, 6.0.x; FortiProxy 7.0.0, 2.0.6 and below, 1.2.x, 1.1.x, 1.0.x; FortiVoiceEnterprise 6.4.3 and below, 6.0.10 and below | — | No fix listed | CNA |
- Fortinet FortiSwitch, FortiRecorder, FortiVoiceEnterprise, FortiOS, FortiProxy VendorFortinet Affected FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 and below; FortiOS 7.0.2 and below, 6.4.8 and below, 6.2.10 and below, 6.0.x; FortiProxy 7.0.0, 2.0.6 and below, 1.2.x, 1.1.x, 1.0.x; FortiVoiceEnterprise 6.4.3 and below, 6.0.10 and below Fixed in — No fix listed CNA
CPE configurations NVD · 124
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* | 1.0.0 – 1.0.7; 1.1.0 – 1.1.6; 1.2.0 – 1.2.13; 2.0.0 – 2.0.6 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:* | 7.0.0 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.0:*:*:*:*:*:*:* | 5.3.0 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.1:*:*:*:*:*:*:* | 5.3.1 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.2:*:*:*:*:*:*:* | 5.3.2 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.3:*:*:*:*:*:*:* | 5.3.3 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.4:*:*:*:*:*:*:* | 5.3.4 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.5:*:*:*:*:*:*:* | 5.3.5 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.6:*:*:*:*:*:*:* | 5.3.6 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.7:*:*:*:*:*:*:* | 5.3.7 | Vulnerable | Fortinet |
- cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* Versions 1.0.0 – 1.0.7; 1.1.0 – 1.1.6; 1.2.0 – 1.2.13; 2.0.0 – 2.0.6 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:* Versions 7.0.0 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.0:*:*:*:*:*:*:* Versions 5.3.0 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.1:*:*:*:*:*:*:* Versions 5.3.1 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.2:*:*:*:*:*:*:* Versions 5.3.2 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.3:*:*:*:*:*:*:* Versions 5.3.3 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.4:*:*:*:*:*:*:* Versions 5.3.4 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.5:*:*:*:*:*:*:* Versions 5.3.5 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.6:*:*:*:*:*:*:* Versions 5.3.6 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.7:*:*:*:*:*:*:* Versions 5.3.7 Vulnerable ·Fortinet
Show 114 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:fortinet:fortivoice:5.3.8:*:*:*:*:*:*:* | 5.3.8 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.10:*:*:*:*:*:*:* | 5.3.10 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.11:*:*:*:*:*:*:* | 5.3.11 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.12:*:*:*:*:*:*:* | 5.3.12 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.13:*:*:*:*:*:*:* | 5.3.13 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.14:*:*:*:*:*:*:* | 5.3.14 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.15:*:*:*:*:*:*:* | 5.3.15 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.16:*:*:*:*:*:*:* | 5.3.16 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.17:*:*:*:*:*:*:* | 5.3.17 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.18:*:*:*:*:*:*:* | 5.3.18 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.19:*:*:*:*:*:*:* | 5.3.19 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.20:*:*:*:*:*:*:* | 5.3.20 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.21:*:*:*:*:*:*:* | 5.3.21 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.22:*:*:*:*:*:*:* | 5.3.22 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.23:*:*:*:*:*:*:* | 5.3.23 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.24:*:*:*:*:*:*:* | 5.3.24 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.25:*:*:*:*:*:*:* | 5.3.25 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:5.3.26:*:*:*:*:*:*:* | 5.3.26 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:* | 6.0.0 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.0.1:*:*:*:*:*:*:* | 6.0.1 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.0.2:*:*:*:*:*:*:* | 6.0.2 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.0.3:*:*:*:*:*:*:* | 6.0.3 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.0.4:*:*:*:*:*:*:* | 6.0.4 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.0.5:*:*:*:*:*:*:* | 6.0.5 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.0.6:*:*:*:*:*:*:* | 6.0.6 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:* | 6.0.7 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:* | 6.0.8 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:* | 6.0.9 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:* | 6.0.10 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:* | 6.4.0 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:* | 6.4.1 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:* | 6.4.2 | Vulnerable | Fortinet |
| cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:* | 6.4.3 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:* | 5.4.0 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:* | 5.4.1 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:* | 5.4.2 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:* | 5.4.3 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:* | 5.4.4 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:* | 5.4.5 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:* | 5.4.6 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:* | 5.4.7 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:* | 5.4.8 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:* | 5.4.9 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:* | 5.4.10 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:* | 5.4.11 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:* | 5.4.12 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:* | 5.4.13 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:* | 5.6.0 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:* | 5.6.1 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:* | 5.6.2 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:* | 5.6.3 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:* | 5.6.4 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:* | 5.6.5 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:* | 5.6.6 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:* | 5.6.7 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:* | 5.6.8 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:* | 5.6.9 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:* | 5.6.10 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:* | 5.6.11 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:* | 5.6.12 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:* | 5.6.13 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:* | 5.6.14 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:* | 6.0.0 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:* | 6.0.1 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:* | 6.0.2 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:* | 6.0.3 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:* | 6.0.4 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:* | 6.0.5 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:* | 6.0.6 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:* | 6.0.7 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:* | 6.0.8 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:* | 6.0.9 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:* | 6.0.10 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:* | 6.0.11 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:* | 6.0.12 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:* | 6.0.13 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:* | 6.0.14 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:* | 6.2.0 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:* | 6.2.1 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:* | 6.2.2 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:* | 6.2.3 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:* | 6.2.4 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:* | 6.2.5 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:* | 6.2.6 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:* | 6.2.7 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:* | 6.2.8 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:* | 6.2.9 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:* | 6.2.10 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:* | 6.4.0 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:* | 6.4.1 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:* | 6.4.2 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:* | 6.4.3 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:* | 6.4.4 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:* | 6.4.5 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:* | 6.4.6 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:* | 6.4.7 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:* | 7.0.0 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:* | 7.0.1 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:* | 7.0.2 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.0:*:*:*:*:*:*:* | 6.0.0 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.1:*:*:*:*:*:*:* | 6.0.1 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.2:*:*:*:*:*:*:* | 6.0.2 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.3:*:*:*:*:*:*:* | 6.0.3 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.4:*:*:*:*:*:*:* | 6.0.4 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.5:*:*:*:*:*:*:* | 6.0.5 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.6:*:*:*:*:*:*:* | 6.0.6 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.7:*:*:*:*:*:*:* | 6.0.7 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.8:*:*:*:*:*:*:* | 6.0.8 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.9:*:*:*:*:*:*:* | 6.0.9 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.10:*:*:*:*:*:*:* | 6.0.10 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.4.0:*:*:*:*:*:*:* | 6.4.0 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.4.1:*:*:*:*:*:*:* | 6.4.1 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortirecorder_firmware:6.4.2:*:*:*:*:*:*:* | 6.4.2 | Vulnerable | Fortinet |
| cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:* | 6.0.0 – 6.0.7; 6.2.0 – 6.2.7; 6.4.0 – 6.4.9; 7.0.0 – 7.0.2 | Vulnerable | Fortinet |
- cpe:2.3:a:fortinet:fortivoice:5.3.8:*:*:*:*:*:*:* Versions 5.3.8 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.10:*:*:*:*:*:*:* Versions 5.3.10 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.11:*:*:*:*:*:*:* Versions 5.3.11 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.12:*:*:*:*:*:*:* Versions 5.3.12 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.13:*:*:*:*:*:*:* Versions 5.3.13 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.14:*:*:*:*:*:*:* Versions 5.3.14 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.15:*:*:*:*:*:*:* Versions 5.3.15 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.16:*:*:*:*:*:*:* Versions 5.3.16 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.17:*:*:*:*:*:*:* Versions 5.3.17 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.18:*:*:*:*:*:*:* Versions 5.3.18 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.19:*:*:*:*:*:*:* Versions 5.3.19 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.20:*:*:*:*:*:*:* Versions 5.3.20 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.21:*:*:*:*:*:*:* Versions 5.3.21 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.22:*:*:*:*:*:*:* Versions 5.3.22 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.23:*:*:*:*:*:*:* Versions 5.3.23 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.24:*:*:*:*:*:*:* Versions 5.3.24 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.25:*:*:*:*:*:*:* Versions 5.3.25 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:5.3.26:*:*:*:*:*:*:* Versions 5.3.26 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:* Versions 6.0.0 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.0.1:*:*:*:*:*:*:* Versions 6.0.1 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.0.2:*:*:*:*:*:*:* Versions 6.0.2 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.0.3:*:*:*:*:*:*:* Versions 6.0.3 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.0.4:*:*:*:*:*:*:* Versions 6.0.4 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.0.5:*:*:*:*:*:*:* Versions 6.0.5 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.0.6:*:*:*:*:*:*:* Versions 6.0.6 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:* Versions 6.0.7 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:* Versions 6.0.8 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:* Versions 6.0.9 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:* Versions 6.0.10 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:* Versions 6.4.0 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:* Versions 6.4.1 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:* Versions 6.4.2 Vulnerable ·Fortinet
- cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:* Versions 6.4.3 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:* Versions 5.4.0 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:* Versions 5.4.1 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:* Versions 5.4.2 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:* Versions 5.4.3 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:* Versions 5.4.4 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:* Versions 5.4.5 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:* Versions 5.4.6 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:* Versions 5.4.7 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:* Versions 5.4.8 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:* Versions 5.4.9 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:* Versions 5.4.10 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:* Versions 5.4.11 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:* Versions 5.4.12 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:* Versions 5.4.13 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:* Versions 5.6.0 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:* Versions 5.6.1 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:* Versions 5.6.2 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:* Versions 5.6.3 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:* Versions 5.6.4 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:* Versions 5.6.5 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:* Versions 5.6.6 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:* Versions 5.6.7 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:* Versions 5.6.8 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:* Versions 5.6.9 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:* Versions 5.6.10 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:* Versions 5.6.11 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:* Versions 5.6.12 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:* Versions 5.6.13 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:* Versions 5.6.14 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:* Versions 6.0.0 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:* Versions 6.0.1 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:* Versions 6.0.2 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:* Versions 6.0.3 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:* Versions 6.0.4 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:* Versions 6.0.5 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:* Versions 6.0.6 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:* Versions 6.0.7 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:* Versions 6.0.8 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:* Versions 6.0.9 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:* Versions 6.0.10 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:* Versions 6.0.11 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:* Versions 6.0.12 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:* Versions 6.0.13 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:* Versions 6.0.14 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:* Versions 6.2.0 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:* Versions 6.2.1 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:* Versions 6.2.2 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:* Versions 6.2.3 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:* Versions 6.2.4 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:* Versions 6.2.5 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:* Versions 6.2.6 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:* Versions 6.2.7 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:* Versions 6.2.8 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:* Versions 6.2.9 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:* Versions 6.2.10 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:* Versions 6.4.0 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:* Versions 6.4.1 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:* Versions 6.4.2 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:* Versions 6.4.3 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:* Versions 6.4.4 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:* Versions 6.4.5 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:* Versions 6.4.6 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:* Versions 6.4.7 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:* Versions 7.0.0 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.0:*:*:*:*:*:*:* Versions 6.0.0 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.1:*:*:*:*:*:*:* Versions 6.0.1 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.2:*:*:*:*:*:*:* Versions 6.0.2 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.3:*:*:*:*:*:*:* Versions 6.0.3 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.4:*:*:*:*:*:*:* Versions 6.0.4 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.5:*:*:*:*:*:*:* Versions 6.0.5 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.6:*:*:*:*:*:*:* Versions 6.0.6 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.7:*:*:*:*:*:*:* Versions 6.0.7 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.8:*:*:*:*:*:*:* Versions 6.0.8 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.9:*:*:*:*:*:*:* Versions 6.0.9 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.10:*:*:*:*:*:*:* Versions 6.0.10 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.4.0:*:*:*:*:*:*:* Versions 6.4.0 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.4.1:*:*:*:*:*:*:* Versions 6.4.1 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortirecorder_firmware:6.4.2:*:*:*:*:*:*:* Versions 6.4.2 Vulnerable ·Fortinet
- cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:* Versions 6.0.0 – 6.0.7; 6.2.0 – 6.2.7; 6.4.0 – 6.4.9; 7.0.0 – 7.0.2 Vulnerable ·Fortinet
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-42755
- 2026-10-03 Alias added: GHSA-v985-ffxm-2rhh
References
More Fortinet Fortios vulnerabilities
- TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
- TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
- TI-2024-36904 Authentication bypass in Fortinet FortiOS KEVCVSS 3.1CRITICAL 9.8
- TI-2024-15234 A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through… KEVCVSS 3.1CRITICAL 9.8
- TI-2024-14448 Out-of-bounds write in Fortinet FortiOS KEVCVSS 3.1CRITICAL 9.8
- TI-2023-12585 Heap-based buffer overflow in Fortinet FortiOS-6K7K KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2021-42755 · CVE Program
- CVE-2021-42755 · NVD
- FIRST EPSS
- GHSA-v985-ffxm-2rhh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences