Lucene search
HistoryJun 02, 2005 - 4:00 a.m.
CVE-2005-1837
fortinet
firewall
vulnerability
hardcoded username
hardcoded password
privilege escalation
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
31.2%
Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console access to gain privileges.
Affected configurations
Node
fortinetfortinet_firewall
| CPE | Name | Operator | Version |
|---|---|---|---|
| fortinet:fortinet_firewall | fortinet fortinet firewall | eq | * |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
31.2%
Related for CVE-2005-1837