Vulnerabilidades de Fortinet

CVE-2022-42475 Crítica · 9.8 KEV Urgente · 89 Exploit público Ransomware CWE-787 02/01/2023

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

CVE-2022-40684 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-287 18/10/2022

Fortinet Multiple Products Authentication Bypass Vulnerability

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

CVE-2021-44168 Alta · 7.8 KEV Alta · 56 Exploit público CWE-494 04/01/2022

Fortinet FortiOS Arbitrary File Download

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.

CVE-2020-12811 Média · 6.1 CWE-80 24/09/2020

A improper neutralization of script-related html tags in a web page (basic xss)…

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

CVE-2019-5591 Média · 6.5 KEV Urgente · 73 Exploit público Ransomware CWE-306 14/08/2020

Fortinet FortiOS Default Configuration Vulnerability

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.

CVE-2020-12812 Crítica · 9.8 KEV Urgente · 83 Ransomware CWE-178 24/07/2020

Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.

CVE-2020-9290 Alta · 7.8 CWE-426 15/03/2020

Untrusted Search Path em Fortinet Forticlient

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

CVE-2020-9287 Alta · 7.8 CWE-426 15/03/2020

Untrusted Search Path em Fortinet Forticlient Emergency Management Server

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

CVE-2019-6693 Média · 6.5 KEV Alta · 68 Exploit público Ransomware CWE-798 21/11/2019

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. The aforementioned sensitive data includes users' passwords (except the administrator's password), private keys' passphrases and High Availability password (when set).

CVE-2018-13379 Crítica · 9.8 KEV Urgente · 100 Exploit público Ransomware CWE-22 04/06/2019

Fortinet FortiOS SSL VPN Path Traversal Vulnerability

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.

CVE-2018-13382 Alta · 7.5 KEV Urgente · 83 Exploit público Ransomware CWE-863 04/06/2019

Fortinet FortiOS and FortiProxy Improper Authorization

An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests

CVE-2018-13383 Média · 6.5 KEV Alta · 63 Ransomware CWE-787 29/05/2019

Fortinet FortiOS and FortiProxy Out-of-bounds Write

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle javascript href data when proxying webpages.

CVE-2019-5589 Alta · 8.8 CWE-426 28/05/2019

Untrusted Search Path em Fortinet Forticlient

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

CVE-2018-13374 Média · 4.3 KEV Urgente · 77 Exploit público Ransomware CWE-732 22/01/2019

Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.