PT-2018-1711 · Fortinet · Fortios

Published

2018-05-18

·

Updated

2019-10-03

·

CVE-2017-14187

CVSS v2.0

7.2

High

VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 5.2 and below Fortinet FortiOS versions 5.4.0 through 5.4.8 Fortinet FortiOS versions 5.6.0 through 5.6.2
Description: A local privilege escalation and local code execution issue in Fortinet FortiOS allows an attacker to execute unauthorized binary programs contained on a USB drive plugged into a FortiGate. This is achieved by linking the binary program to a command that is allowed to be run by the fnsysctl CLI command. The issue is caused by access control errors in the operating system. An admin user with super admin privileges can exploit this issue to execute arbitrary binaries.
Recommendations: For Fortinet FortiOS versions 5.2 and below, update to a version above 5.2 to resolve the issue. For Fortinet FortiOS versions 5.4.0 through 5.4.8, update to a version above 5.4.8 to resolve the issue. For Fortinet FortiOS versions 5.6.0 through 5.6.2, update to a version above 5.6.2 to resolve the issue. As a temporary workaround, consider restricting access to the fnsysctl CLI command to minimize the risk of exploitation.

Fix

LPE

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2018-01277
CVE-2017-14187

Affected Products

Fortios