PT-2014-8629 · Fortinet+1 · Fortiadc-E+1

Published 2014-11-01 · Updated 2017-09-08 · CVE-2014-8582

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions FortiNet FortiADC-E versions 3.1.1 through 4.0.4 Coyote Point Equalizer version 10.2.0a

Description The issue allows remote attackers to obtain access to arbitrary subnets via unspecified vectors.

Recommendations For FortiNet FortiADC-E versions 3.1.1 through 4.0.4, update to version 4.0.5 or later. For Coyote Point Equalizer version 10.2.0a, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2014-8582

Affected Products

Equalizer

Fortiadc-E

References · 5

• http://fortiguard.com/advisory/FG-IR-14-032 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8582 · Security Note
• http://secunia.com/advisories/61866 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98384 · Note
• http://docs.fortinet.com/uploaded/files/2164/FortiADC-E-4.0.5-GA-Release-Notes.pdf · Note