PT-2023-6016 · Fortinet · Fortinet Ips Engine+1

Published 2023-10-10 · Updated 2023-10-13 · CVE-2023-40718

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Fortinet IPS Engine versions 6.158, 7.166, 7.321

Description The issue is related to an interpretation conflict in the Fortinet IPS Engine, which can be exploited by an attacker to evade IPS features. This can be achieved via crafted TCP packets, potentially allowing an unauthenticated remote attacker to bypass existing security restrictions and evade NGFW policies or IPS Engine protection.

Recommendations For Fortinet IPS Engine version 6.158, update to a fixed version to resolve the issue. For Fortinet IPS Engine version 7.166, update to a fixed version to resolve the issue. For Fortinet IPS Engine version 7.321, update to a fixed version to resolve the issue. As a temporary workaround, consider restricting the use of crafted TCP packets to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-436

Related Identifiers

BDU:2023-06717

CVE-2023-40718

Affected Products

Fortinet Ips Engine

Fortios

References · 5

• https://fortiguard.com/psirt/FG-IR-23-090 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40718 · Security Note
• https://bdu.fstec.ru/vul/2023-06717 · Security Note
• https://osv.dev/vulnerability/CVE-2023-40718 · Vendor Advisory
• https://t.me/cvenotify/59199 · Telegram Post