PT-2022-8912 · Fortinet · Fortisandbox

Published 2022-04-06 · Updated 2022-04-13 · CVE-2020-29013

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions FortiSandbox versions prior to 3.2.2

Description An improper input validation issue in the sniffer interface may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests.

Recommendations For versions prior to 3.2.2, update to version 3.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the sniffer interface to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2020-29013

Affected Products

Fortisandbox

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-29013 · Security Note
• https://fortiguard.com/advisory/FG-IR-20-178 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-29013 · Vendor Advisory
• https://t.me/cvenotify/28506 · Telegram Post
• https://t.me/cibsecurity/40226 · Telegram Post