Fortinet vulnerabilities

CVE-2022-42475 Critical · 9.8 KEV Urgent · 89 Public exploit Ransomware CWE-787 Jan 2, 2023

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

CVE-2022-40684 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-287 Oct 18, 2022

Fortinet Multiple Products Authentication Bypass Vulnerability

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

CVE-2021-44168 High · 7.8 KEV High · 56 Public exploit CWE-494 Jan 4, 2022

Fortinet FortiOS Arbitrary File Download

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.

CVE-2020-12811 Medium · 6.1 CWE-80 Sep 24, 2020

A improper neutralization of script-related html tags in a web page (basic xss)…

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

CVE-2019-5591 Medium · 6.5 KEV Urgent · 73 Public exploit Ransomware CWE-306 Aug 14, 2020

Fortinet FortiOS Default Configuration Vulnerability

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.

CVE-2020-12812 Critical · 9.8 KEV Urgent · 83 Ransomware CWE-178 Jul 24, 2020

Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.

CVE-2020-9290 High · 7.8 CWE-426 Mar 15, 2020

Untrusted Search Path in Fortinet Forticlient

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

CVE-2020-9287 High · 7.8 CWE-426 Mar 15, 2020

Untrusted Search Path in Fortinet Forticlient Emergency Management Server

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

CVE-2019-6693 Medium · 6.5 KEV High · 68 Public exploit Ransomware CWE-798 Nov 21, 2019

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. The aforementioned sensitive data includes users' passwords (except the administrator's password), private keys' passphrases and High Availability password (when set).

CVE-2018-13379 Critical · 9.8 KEV Urgent · 100 Public exploit Ransomware CWE-22 Jun 4, 2019

Fortinet FortiOS SSL VPN Path Traversal Vulnerability

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.

CVE-2018-13382 High · 7.5 KEV Urgent · 83 Public exploit Ransomware CWE-863 Jun 4, 2019

Fortinet FortiOS and FortiProxy Improper Authorization

An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests

CVE-2018-13383 Medium · 6.5 KEV High · 63 Ransomware CWE-787 May 29, 2019

Fortinet FortiOS and FortiProxy Out-of-bounds Write

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle javascript href data when proxying webpages.

CVE-2019-5589 High · 8.8 CWE-426 May 28, 2019

Untrusted Search Path in Fortinet Forticlient

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

CVE-2018-13374 Medium · 4.3 KEV Urgent · 77 Public exploit Ransomware CWE-732 Jan 22, 2019

Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.