CVE-2018-13366

2019-04-0916:20:13

fortinet

www.cve.org

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

35.9%

JSON

An information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows attacker to reveals serial number of FortiGate via hostname field defined in connection control setup packets of PPTP protocol.

CNA Affected

[
  {
    "product": "Fortinet FortiOS",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.1"
      },
      {
        "status": "affected",
        "version": "5.6.7 and below"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-18-101