CVE-2019-17657

2020-04-0717:11:07

fortinet

www.cve.org

0.004 Low

EPSS

Percentile

75.2%

JSON

An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an attacker to cause admin webUI denial of service (DoS) via handling special crafted HTTP requests/responses in pieces slowly, as demonstrated by Slow HTTP DoS Attacks.

CNA Affected

[
  {
    "product": "Fortinet FortiSwitch",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "below 3.6.11"
      },
      {
        "status": "affected",
        "version": "6.0.6 and 6.2.2"
      }
    ]
  },
  {
    "product": "FortiAnalyzer",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "below 6.2.3"
      }
    ]
  },
  {
    "product": "FortiManager",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "below 6.2.3"
      }
    ]
  },
  {
    "product": "FortiAP-S/W2",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "below 6.2.2"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-19-013

0.004 Low

EPSS

Percentile

75.2%

JSON

Related for CVELIST:CVE-2019-17657