CVE-2021-24023

—

CVSS 3.1

8.8 high

EPSS

<1%p53

Published

Jun 3, 2021 (Jun 3, 2021)

Modified

Jun 17, 2026

Description

An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command.

Vendors: fortinet
Products: fortiai firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.