CVE-2020-29016

CVSS 3.1: 9.8 critical
EPSS: 3%p88
Published: Jan 14, 2021 · Jan 14, 2021
Modified: Jun 17, 2026

Analyze CVE-2020-29016 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauthenticated, remote attacker to overwrite the content of the stack and potentially execute arbitrary code by sending a crafted request with a large certname.

Vendors: fortinet

Products: fortiweb

Weakness: CWE-787

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.3%)

In the news

2 stories

Fortinet addresses 4 vulnerabilities in FortiWeb web application firewalls

Security AffairsFeb 5, 08:33 UTC · Feb 5, 2021VulnerabilityCVE-2020-29015 CVE-2020-29016 CVE-2020-29019+12 · 1 read

Flaws in Fortinet FortiWeb WAF could allow corporate networks to hack

Security AffairsJan 7, 14:23 UTC · Jan 7, 2021VulnerabilityCVE-2020-29015 CVE-2020-29016 CVE-2020-29018+13 · 2 reads