Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2021-42757 Details
Description
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://fortiguard.com/advisory/FG-IR-21-173 | CVE | Vendor Advisory |
| https://fortiguard.com/advisory/FG-IR-21-173 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | [email protected] |
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| fortinet fortiadc | >= 5.0.0, <= 6.1.5 >= 6.2.0, <= 6.2.2 |
CPE
Remediation
| |
| fortinet fortianalyzer | >= 6.0.0, <= 6.4.7 >= 7.0.0, <= 7.0.2 |
CPE
Remediation
| |
| fortinet fortimail | >= 5.4.0, <= 6.2.7 >= 6.4.0, <= 6.4.6 >= 7.0.0, <= 7.0.2 |
CPE
Remediation
| |
| fortinet fortimanager | >= 6.0.0, <= 6.4.7 >= 7.0.0, <= 7.0.2 |
CPE
Remediation
| |
| fortinet fortindr | >= 1.1.0, <= 1.5.2 |
CPE
Remediation
| |
| fortinet fortios-6k7k | <= 6.2.8 6.4.2 6.4.6 |
CPE
Remediation
| |
| fortinet fortiportal | >= 5.0.0, <= 6.0.10 |
CPE
Remediation
| |
| fortinet fortiproxy | >= 1.0.0, <= 2.0.7 7.0.0 7.0.1 |
CPE
Remediation
| |
| fortinet fortivoice | >= 6.0.0, <= 6.0.10 >= 6.4.0, <= 6.4.4 |
CPE
Remediation
| |
| fortinet fortiweb | >= 5.0.0, <= 6.3.16 6.4.0 6.4.1 |
CPE
Remediation
| |
| fortinet fortios | >= 5.0.0, <= 6.0.13 >= 6.2.0, <= 6.2.9 >= 6.4.0, <= 6.4.7 >= 7.0.0, <= 7.0.2 |
CPE
Remediation
| |
| fortinet fortirecorder firmware | >= 2.6.0, <= 6.0.10 >= 6.4.0, <= 6.4.2 |
CPE
Remediation
| |
| fortinet fortiswitch | >= 6.0.0, <= 6.4.9 >= 7.0.0, <= 7.0.3 |
CPE
Remediation
| |
Change History
9 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Oct 16, 2025 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jan 18, 2024 | CPE Deprecation Remap | [email protected] |
| Jan 18, 2024 | CPE Deprecation Remap | [email protected] |
| Aug 29, 2023 | Reanalysis | [email protected] |
| Aug 8, 2023 | CWE Remap | [email protected] |
| Dec 9, 2021 | Initial Analysis | [email protected] |