CVE-2021-24022: Fortinet Fortianalyzer

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A buffer overflow vulnerability in FortiAnalyzer CLI 6.4.5 and below, 6.2.7 and below, 6.0.x and FortiManager CLI 6.4.5 and below, 6.2.7 and below, 6.0.x may allow an authenticated, local attacker to perform a Denial of Service attack by running the `diagnose system geoip-city` command with a large ip value.

Affected products

• Fortinet Fortianalyzer: from 6.0.0, before 6.2.8 (fixed in 6.2.8); from 6.4.0, before 6.4.6 (fixed in 6.4.6)
• Fortinet FortiManager: from 6.0.0, before 6.2.8 (fixed in 6.2.8); from 6.4.0, before 6.4.6 (fixed in 6.4.6)

Published 2021-07-20. Last modified 2026-06-17.