CVE-2020-29016 - A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauthenticated, remote attacker to overwrite the content of the stack and potentially execute arbitrary code by sending a crafted request with a large certname

Back Back to CVE browser

CRITICAL

A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauthenticated, remote attacker to overwrite the content of the stack and potentially execute arbitrary code by sending a crafted request with a large certname

Published Jan 14, 2021

9.8

CRITICAL

CVSS 3.1

EPSS 3.30%

Description

A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauthenticated, remote attacker to overwrite the content of the stack and potentially execute arbitrary code by sending a crafted request with a large certname.

Affected products

Vendor Fortinet Product Fortinet FortiWeb Default
n/a
- Version
  FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4
  Status
  affected
  Constraints
  -