CVE-2021-22128

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality...

CVE-2021-22128: Undefined Security Weakness

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality...

Fortinet FortiOS Input Validation Error Vulnerability (CNVD-2020-23174)

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

CVE-2018-13371

An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component...

CVE-2018-13371

An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component...

Xxe

An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component...

CVE-2018-13371

CVE-2018-13371 affects Fortinet FortiOS/FortiGate via the ZebOS component. An authenticated, regular user can change routing settings on vulnerable devices. Constrained by ZebOS, likely RCE/routing manipulation as described in Fortinet advisory FG-IR-18-230; affected versions include FortiOS 5.x ...

CVE-2018-13371

An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component...

CVE-2018-13371

An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component...

CVE-2018-13371: Improper Input Validation

An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component...

The vulnerability of the ZebOS component of the FortiOS operating system, which allows a hacker to modify routing settings

The vulnerability of the ZebOS component of the FortiOS operating system is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to remotely modify routing settings...

Fortinet FortiGate < 5.4.11 / 5.6.x < 5.6.8 / 6.x < 6.0.3 RCE (FG-IR-18-230)

The remote host is running FortiOS version 5.x prior to 5.4.11, 5.6.x prior to 5.6.8 or 6.x prior to 6.0.3. It is, therefore, affected by a remote code execution vulnerability that allows an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS...

Protect

An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component...

CVE-2018-17539

The BGP daemon bgpd in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system AS path containing 8 or more autonomous system number ASN elements...

CVE-2018-17539

The BGP daemon bgpd in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system AS path containing 8 or more autonomous system number ASN elements...

Design/Logic Flaw

The BGP daemon bgpd in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system AS path containing 8 or more autonomous system number ASN elements...

CVE-2018-17539

The CVE-2018-17539 issue affects ZebOS/bgpd and OcNOS/bgpd, with vulnerable versions up to ZebOS 7.10.6 and OcNOS 1.3.3.145. An attacker can cause a denial of service by sending an AS path containing 8 or more ASN elements, disrupting dynamic routing as the bgpd process restarts. F5 advisory (K17...

CVE-2018-17539

The BGP daemon bgpd in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system AS path containing 8 or more autonomous system number ASN elements...

PT-2018-14048

Name of the Vulnerable Software and Affected Versions IP Infusion ZebOS versions prior to 7.10.6 OcNOS versions prior to 1.3.3.145 Description The issue allows remote attackers to cause a denial of service attack via an autonomous system AS path containing 8 or more autonomous system number ASN...

CVE-2018-17539: Undefined Security Weakness

The BGP daemon bgpd in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system AS path containing 8 or more autonomous system number ASN elements...