fortinet fortios 7.0.0 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthenticated, unauthorized attacker to inject path traversal character sequences to disclose sensitive information of the server via the GET request...

Fortinet Fortiproxy 7.0.0 Fortinet Fortios 7.0.0 Fortinet Fortios 7.0.1

6

CVSSv3

A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unauthorized code or commands via specific hex read/write operations....

Fortinet Fortios Fortinet Fortios 7.0.0

8.8

CVSSv3

A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13 may allow an attacker to execute arbitrary code via specially crafted installation images....

Fortinet Fortios Fortinet Fortios 7.0.0 Fortinet Fortios 7.0.1

9.8

CVSSv3

An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an unauthenticated attacker to corrupt control data on the heap via specifically crafted requests to SSLVPN, resulting in potentially arbitrary code execution....

Fortinet Fortios Fortinet Fortios 7.0.0

5.3

CVSSv3

An improper certificate validation vulnerability [CWE-295] in FortiOS 6.0.0 through 6.0.14, 6.2.0 through 6.2.10, 6.4.0 through 6.4.8, 7.0.0 may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the FortiGate and some peers such...

Fortinet Fortios 7.0.0 Fortinet Fortios

8.8

CVSSv3

An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison 2.0.3 and below, 1.2.11 and below and FortiGate verison 7.0.0, 6.4.6 and below, 6.2.9 and below of SSL VPN portal may allow a remote, unauthenticated attacker to...

Fortinet Fortiproxy Fortinet Fortios Fortinet Fortios 7.0.0

8.8

CVSSv3

A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute arbitrary code via a specifically crafted firmware image....

Fortinet Fortios Fortinet Fortios 7.0.0

7.5

CVSSv3

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering....

Fortinet Fortios Fortinet Fortios 7.0.0

3.8

CVSSv3

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin...

Fortinet Fortios 7.0.0 Fortinet Fortios

7.8

CVSSv3

An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and FortiProxy 2.0.1 and below, 1.2.9 and below may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via...

Fortinet Fortiproxy Fortinet Fortiproxy 2.0.0 Fortinet Fortiproxy 2.0.1 Fortinet Fortios Fortinet Fortios 7.0.0

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook