CVE-2016-7541

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode the default mode are not affected...

CVE-2016-7541

Fortinet FortiOS/FortiGate FortiGate devices with IPSengine configured in flow mode are affected by CVE-2016-7541. In FortiOS 5.x versions prior to 5.4.0, long‑lived sessions could violate an active security policy during IPS signature updates when the IPS engine is in flow mode; FortiGate device...

Information disclosure

The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption...

CVE-2016-8492

The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption...

CVE-2016-8492

The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption...

CVE-2016-8492

CVE-2016-8492 describes an information-disclosure vulnerability in Fortinet FortiGate/FortiOS where the ANSI X9.31 RNG is used in long‑lived security channels (IPSec/TLS), potentially allowing unauthorized read access to data. Connected sources confirm this relates to DUHK-style weaknesses in RNG...

CVE-2016-8492

The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption...

Fortinet FortiGate ZebOS routing remote shell service enabled (FG-IR-15-020)

The Fortinet FortiGate device has the ZebOS routing remote shell service enabled. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descriptio...

FortiOS flow-mode detection bypass under certain conditions

A FortiGate configured to use flow-based protection will stop monitoring network sessions that are active when a scanning engine is reloaded after an update nearly instantaneous process. This tends to impact long lived network sessions, with chances to be alive during and after an update, such a...

BlackNurse Spoofed ICMP Denial Of Service Proof Of Concept Vulnerability

Blacknurse is a low bandwidth ICMP attack that is capable of doing denial of service to well known firewalls. Most ICMP attacks that we see are based on ICMP Type 8 Code 0 also called a ping flood attack. BlackNurse is based on ICMP with Type 3 Code 3 packets. We know that when a user has allowed...

Fortinet FortiGate Cookie Parser Buffer Overflow Vulnerability (FG-IR-16-023) - Active Check

FortiGate firmware FOS released before Aug 2012 has a cookie parser buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)

No description provided by source...

FortiGate firmware Cookie Parser Buffer Overflow Vulnerability

FortiGate is an ASIC-accelerated UTM solution that effectively defends against network- and content-layer attacks, detecting and eliminating multi-layer attacks such as viruses, worms, intrusions, and Web-based malicious content in real-time applications without degrading network performance. A...

Fortinet FortiGate Buffer Overflow Vulnerability

Fortinet FortiGate is a set of network security platform developed by the U.S. company Fita Fortinet. The platform provides firewall, antivirus and intrusion prevention IPS, application control, anti-spam, wireless controller and WAN acceleration. A buffer overflow vulnerability exists in Fortine...

Fortigate Firewalls - 'EGREGIOUSBLUNDER' Remote Code Execution

Exploit for hardware platform in category web applications Exploit Title: Fortigate Firewalls - Remote Code Execution EGREGIOUSBLUNDER Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: https://www.fortinet.com/products/fortigate/ Full Exploit:...

Fortigate Firewalls - EGREGIOUSBLUNDER Remote Code Execution

Fortigate Firewalls - EGREGIOUSBLUNDER Remote Code Execution Exploit Title: Fortigate Firewalls - Remote Code Execution EGREGIOUSBLUNDER Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: https://www.fortinet.com/products/fortigate/ Full Exploit:...

Fortigate Firewall Remote HTTPD Cookie Overflow Vulnerability

FortiGate Fita Firewall is a network firewall product from Fortinet Fita for defense against attacks such as network and malicious code at the network and content layers. A remote HTTPD cookie overflow vulnerability exists in Fortigate Firewall. An attacker could exploit the vulnerability by...

Fortigate Firewalls - 'EGREGIOUSBLUNDER' Remote Code Execution

Exploit Title: Fortigate Firewalls - Remote Code Execution EGREGIOUSBLUNDER Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: https://www.fortinet.com/products/fortigate/ Full Exploit: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40276.zip...

FortiGate firmware Cookie Parser Buffer Overflow Vulnerability

No description provided by source...

Fortinet FortiGate Cookie Parser Buffer Overflow Vulnerability (FG-IR-16-023) - Version Check

Fortinet FortiGate firmware FOS released before Aug 2012 has a cookie parser buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...