Tracker / CVE-2021-24016
CVE-2021-24016
Low 3.7
An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in policy name, when exported as excel file and opened unsafely on the victim host.
Affected products and versions
| fortinet | fortimanager · … → 6.2.8 |
|---|---|
| fortinet | fortimanager · 6.4.0 → 6.4.4 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.