CVE-2020-29016

CVE-2020-29016 is a critical stack-based buffer overflow vulnerability affecting FortiWeb versions 6.3.0 through 6.3.5 and versions prior to 6.2.4. An unauthenticated, remote attacker can exploit this by sending a crafted request with a large 'certname' to potentially execute arbitrary code. With a CVSS score of 9.8 (Critical), this vulnerability has a network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV list) or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered significant community discussion and media coverage, indicating high awareness.