Vulnerability Description
A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands.
CVSS Score
6.7
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Meru Firmware | >= 8.5.0, <= 8.5.5 |
| Fortinet | Meru | - |
Related Weaknesses (CWE)
References
- https://fortiguard.com/advisory/FG-IR-21-004Vendor Advisory
- https://fortiguard.com/advisory/FG-IR-21-004Vendor Advisory
FAQ
What is CVE-2021-42759?
CVE-2021-42759 is a vulnerability with a CVSS score of 6.7 (MEDIUM). A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands.
How severe is CVE-2021-42759?
CVE-2021-42759 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-42759?
Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Meru Firmware, Fortinet Meru.