PT-2014-2005 · Fortinet · Fortios

Publicado 2014-08-25 · Atualizado 2017-08-29 · CVE-2014-2216

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FortiOS versions prior to 4.3.16 FortiOS versions prior to 5.0.8

Description The issue is caused by errors in input processing in the FortiManager service of the FortiOS operating system. This can be exploited by a remote attacker to potentially execute arbitrary code or cause a denial of service.

Recommendations For FortiOS versions prior to 4.3.16, update to version 4.3.16 or later. For FortiOS versions prior to 5.0.8, update to version 5.0.8 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2018-01302

CVE-2014-2216

Produtos afetados

Fortios

Referências · 8

• http://secunia.com/advisories/60724 · Nota
• http://kb.cert.org/vuls/id/730964 · Nota
• http://securityfocus.com/bid/69338 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2216 · Nota de Segurança
• https://bdu.fstec.ru/vul/2018-01302 · Nota de Segurança
• http://fortiguard.com/advisory/FG-IR-14-006 · Aviso do Fabricante
• http://securitytracker.com/id/1030753 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95442 · Nota