CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.3. It affects FortiOS. It is listed in CISA's Known Exploited Vulnerabilities catalog, indicating confirmed active exploitation in the wild. Exploitation may require the attacker to be authenticated.
CISA KEV Details
Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.
Ransomware use: Unknown
Added to KEV: 2021-12-10
Required action: Apply updates per vendor instructions.
CVE
CVE-2021-44168
Severity
LOW
CVSS
3.3
EPSS
0.87%
FortiOS
Original NVD Description
A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.
Related CVEs
Other vulnerabilities affecting the same vendor(s)