PT-2014-2005 · Fortinet · Fortios

Published 2014-08-25 · Updated 2017-08-29 · CVE-2014-2216

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FortiOS versions prior to 4.3.16 FortiOS versions prior to 5.0.8

Description The issue is caused by errors in input processing in the FortiManager service of the FortiOS operating system. This can be exploited by a remote attacker to potentially execute arbitrary code or cause a denial of service.

Recommendations For FortiOS versions prior to 4.3.16, update to version 4.3.16 or later. For FortiOS versions prior to 5.0.8, update to version 5.0.8 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2018-01302

CVE-2014-2216

Affected Products

Fortios

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2014-2216 · Security Note
• https://bdu.fstec.ru/vul/2018-01302 · Security Note
• http://fortiguard.com/advisory/FG-IR-14-006 · Vendor Advisory
• http://secunia.com/advisories/60724 · Note
• http://kb.cert.org/vuls/id/730964 · Note
• http://securityfocus.com/bid/69338 · Note
• http://securitytracker.com/id/1030753 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95442 · Note