CVE

CVE-2021-44168

Fortinet FortiOS Arbitrary File Download

Fortinet · FortiOS

Date added (CISA)

2021-12-10

Remediation due

2021-12-24

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.