CVE-2017-3130

2017-08-1021:00:00

fortinet

www.cve.org

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

47.1%

JSON

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.

CNA Affected

[
  {
    "product": "Fortinet FortiOS",
    "vendor": "Fortinet, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FortiOS 5.6.0, 5.4.4 and below versions"
      }
    ]
  }
]

References

www.securityfocus.com/bid/100211

fortiguard.com/advisory/FG-IR-17-073