CVE-2018-13371

2020-04-0213:29:07

fortinet

www.cve.org

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

40.1%

JSON

An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component.

CNA Affected

[
  {
    "product": "Fortinet FortiOS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.0 and below versions"
      },
      {
        "status": "affected",
        "version": "5.6.7 and below"
      },
      {
        "status": "affected",
        "version": "5.4.10 and below"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-18-230