CVE-2021-26111

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device.
References
Link Resource
https://fortiguard.com/advisory/FG-IR-21-026 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-06-01 20:15

Updated : 2024-02-28 18:28


NVD link : CVE-2021-26111

Mitre link : CVE-2021-26111

CVE.ORG link : CVE-2021-26111


JSON object : View

Products Affected

fortinet

  • fortiswitch
CWE
CWE-401

Missing Release of Memory after Effective Lifetime