CVE-2021-44168
Fortinet FortiOS Arbitrary File Download
CVSS
—
Sem CVSS
EPSS
0.9%
p60
KEV
SIM
10 de dez. de 2021
Exploit Today
68
0-100
Publicado: — · Última mod.: —
0.9%EPSS · 30 dias0.9%
2026-10-082026-11-05
Produto
Fortinet / FortiOS
Vulnerabilidade
Fortinet FortiOS Arbitrary File Download
Adicionado ao KEV
10 de dez. de 2021
Corrigir até
24 de dez. de 2021
Uso conhecido em ransomware
Não
Descrição resumida
Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-44168
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2025-686865.9 MÉD98.2%
KEV—79Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability101dCVE-2024-217629.8 CRÍ99.7%
KEV—80Fortinet FortiOS Out-of-Bound Write Vulnerability14dCVE-2019-55916.5 MÉD97.3%
KEV—79Fortinet FortiOS Default Configuration Vulnerability83dCVE-2020-128129.8 CRÍ98.8%
KEV—80Fortinet FortiOS SSL VPN Improper Authentication Vulnerability34dCVE-2019-66936.5 MÉD93.9%
KEV—78Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability94dCVE-2018-13379—100.0%
KEV—80Fortinet FortiOS SSL VPN Path Traversal Vulnerability—