CVE-2021-44170: Fortinet FortiOS

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments.

Affected products

• Fortinet FortiOS: from 6.0.0, up to and including 6.0.14; from 6.2.0, before 6.2.11 (fixed in 6.2.11); from 6.4.0, before 6.4.9 (fixed in 6.4.9); from 7.0.0, up to and including 7.0.2
• Fortinet FortiProxy: from 1.0.0, up to and including 1.0.7; from 1.1.0, up to and including 1.1.6; from 1.2.0, up to and including 1.2.13; from 2.0.0, before 2.0.8 (fixed in 2.0.8)

Published 2022-07-18. Last modified 2026-06-17.