CVE-2014-2216

2014-08-2514:55:06

[email protected]

web.nvd.nist.gov

fortimanager

fortinet

fortios

cve-2014-2216

denial of service

remote attack

arbitrary code

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.076 Low

EPSS

Percentile

94.2%

JSON

The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.0.0 before 5.0.8 on FortiGate devices allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted request.

Affected configurations

NVD

Node

fortinetfortiosRange≤4.3.15

fortinetfortiosMatch4.3.10

fortinetfortiosMatch4.3.12

fortinetfortiosMatch4.3.13

fortinetfortiosMatch4.3.14

fortinetfortiosMatch5.0.0

fortinetfortiosMatch5.0.3

fortinetfortiosMatch5.0.4

fortinetfortiosMatch5.0.5

fortinetfortiosMatch5.0.6

fortinetfortiosMatch5.0.7

CPENameOperatorVersion
fortinet:fortiosfortinet fortiosle4.3.15
fortinet:fortiosfortinet fortioseq4.3.10
fortinet:fortiosfortinet fortioseq4.3.12
fortinet:fortiosfortinet fortioseq4.3.13
fortinet:fortiosfortinet fortioseq4.3.14
fortinet:fortiosfortinet fortioseq5.0.0
fortinet:fortiosfortinet fortioseq5.0.3
fortinet:fortiosfortinet fortioseq5.0.4
fortinet:fortiosfortinet fortioseq5.0.5
fortinet:fortiosfortinet fortioseq5.0.6

CPE	Name	Operator	Version
fortinet:fortios	fortinet fortios	le	4.3.15
fortinet:fortios	fortinet fortios	eq	4.3.10
fortinet:fortios	fortinet fortios	eq	4.3.12
fortinet:fortios	fortinet fortios	eq	4.3.13
fortinet:fortios	fortinet fortios	eq	4.3.14
fortinet:fortios	fortinet fortios	eq	5.0.0
fortinet:fortios	fortinet fortios	eq	5.0.3
fortinet:fortios	fortinet fortios	eq	5.0.4
fortinet:fortios	fortinet fortios	eq	5.0.5
fortinet:fortios	fortinet fortios	eq	5.0.6