Protect

An access of uninitialized pointer vulnerability CWE-824 in the SSL VPN portal of FortiOS & FortiProxy may allow a remote unauthenticated or authenticated see Affected Products section attacker to crash the sslvpn daemon via an HTTP GET request...

CVE-2021-44171

CVE-2021-44171 describes an os command injection in Fortinet FortiOS that allows an attacker to execute privileged commands on a linked FortiSwitch via diagnostic CLI commands. Affected FortiOS versions: 6.0.0–6.0.14, 6.2.0–6.2.10, 6.4.0–6.4.8, and 7.0.0–7.0.3. Root cause is improper neutralizati...

Protect

An improper neutralization of special elements used in an os command CWE-78 vulnerability in FortiOS may allow an authenticated attacker to execute privileged commands on a linked FortiSwitch via diagnostic CLI commands...

CVE-2021-44171

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiOS version 6.0.0 through 6.0.14, FortiOS version 6.2.0 through 6.2.10, FortiOS version 6.4.0 through 6.4.8, FortiOS version 7.0.0 through 7.0.3 allows attacker to execute privileged command...

The vulnerability in the web interface of the FortiOS operating system and the proxy server for protecting against Internet attacks, FortiProxy, allows a perpetrator to increase their privileges.

The vulnerability in the web interface of the FortiOS operating system and the FortiProxy proxy server for protection against Internet attacks is related to the possibility of bypassing authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Fortinet FortiOS 操作系统命令注入漏洞

Fortinet FortiOS is a security operating system dedicated to the FortiGate network security platform from Fortinet, a US-based company. The system provides users with a variety of security features such as firewall, anti-virus, IPSec/SSLVPN, Web content filtering and anti-spam.Fortinet FortiOS ha...

CVE-2021-44171

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiOS version 6.0.0 through 6.0.14, FortiOS version 6.2.0 through 6.2.10, FortiOS version 6.4.0 through 6.4.8, FortiOS version 7.0.0 through 7.0.3 allows attacker to execute privileged command...

PT-2022-5766 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.0.x, 6.2.0 through 6.2.10, 6.4.0 through 6.4.8, 7.0.0 through 7.0.5, 7.2.0 FortiProxy versions 1.2.x, 2.0.0 through 2.0.9, 7.0.0 through 7.0.4 Description: The issue is related to an access of uninitialized pointer in the S...

Protect

An authentication bypass using an alternate path or channel vulnerability CWE-288 in FortiOS, FortiProxy and FortiSwitchManager may allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests...

Fortinet Fortigate Privilege escalation via switch-control CLI command (FG-IR-21-242)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-242 advisory. - A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiOS version 6.0....

PT-2022-4986

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.0.0 through 7.0.6 FortiOS versions 7.2.0 through 7.2.1 FortiProxy version 7.0.0 through 7.0.6 FortiProxy version 7.2.0 FortiSwitchManager version 7.0.0 FortiSwitchManager version 7.2.0 Description An authentication bypass...

Fortinet Fortigate Authentication bypass in administrative interface (FG-IR-22-377)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-377 advisory. - An authentication bypass using an alternate path or channel CWE-288 in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0...

PT-2022-6447 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.4.11 and earlier, 7.0.0 through 7.0.8, 7.2.0 through 7.2.2 FortiProxy versions 7.0.0 through 7.0.8, 7.2.0 through 7.2.2 Description: A relative path traversal issue in the Virtual Domains VDOM technology of FortiOS and...

Fortinet FortiOS 授权问题漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. An authorization issue...

Fortinet FortiOS Improper Access Control (CVE-2018-13374)

An improper access control vulnerability exists in Fortinet FortiOS. Successful exploitation of this vulnerability could allow a remote attacker to read sensitive files on the affected system...

Fortinet Fortigate Flaws over keytab encryption scheme (FG-IR-22-158)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-158 advisory. - A missing cryptographic steps vulnerability CWE-325 in the functions that encrypt the keytab files in FortiOS version 7.2.0...

Fortinet Fortigate xss (FG-IR-21-222)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-222 advisory. - An improper neutralization of input during web page generation vulnerability CWE-79 in FortiOS version 7.2.0, version 6.4.0...

The vulnerability of the FortiOS network interface controller software in FortiGate, related to access control deficiencies, allows attackers to disclose sensitive information.

The vulnerability of the FortiOS network interface controller software in FortiGate systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server...

Vulnerabilities fixed in Fortinet products

Forinet has fixed vulnerabilities in FortiOS, FortiAP, and FortiMail. The vulnerabilities allow a malicious party to execute attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Circumvention of security measure. Remote code execution User...