Fortinet Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

Fortinet FortiOS173
Fortinet FortiWeb76
Fortinet FortiManager59
Fortinet FortiAnalyzer51
Fortinet FortiProxy48

Przeciwdziałanie

Official Fix397
Temporary Fix0
Workaround2
Unavailable3
Not Defined318

Wykorzystywanie

High19
Functional0
Proof-of-Concept40
Unproven9
Not Defined652

Wektor dostępu

Not Defined0
Physical2
Local116
Adjacent29
Network573

Uwierzytelnianie

Not Defined0
High83
Low324
None313

Interakcja z użytkownikiem

Not Defined0
Required167
None553

C3BM Index

CVSSv3 Base

≤10
≤20
≤37
≤445
≤5141
≤6159
≤7141
≤8116
≤973
≤1038

CVSSv3 Temp

≤10
≤20
≤38
≤451
≤5151
≤6156
≤7148
≤8100
≤974
≤1032

VulDB

≤10
≤24
≤325
≤4103
≤5163
≤6113
≤7112
≤8108
≤958
≤1034

NVD

≤10
≤20
≤32
≤46
≤523
≤666
≤792
≤881
≤950
≤1042

CNA

≤10
≤20
≤35
≤427
≤562
≤651
≤777
≤888
≤967
≤1030

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤102

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k165
<2k334
<5k207
<10k2
<25k0
<50k6
<100k6
≥100k0

Wykorzystaj dzisiaj

<1k661
<2k40
<5k12
<10k1
<25k5
<50k1
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (101): Antivirus (5), Connect (1), FSSO Collector (1), FortiADC (31), FortiADC Manager (1), FortiADCManager (1), FortiAI (1), FortiAP (3), FortiAP-C (2), FortiAP-S (1), FortiAP-S-W2 (1), FortiAP-S W2 (1), FortiAP-U (5), FortiAP-U CLI (1), FortiAP-W2 (2), FortiAnalyzer (51), FortiAnalyzer Appliance (2), FortiAnalyzerVM (1), FortiAuthenticator (15), FortiAuthenticator HA Service (1), FortiAuthenticator OWA Agent for Microsoft OWA (1), FortiBalancer (3), FortiClient (46), FortiClientEMS (9), FortiClient EMS (3), FortiClient Host Security (1), FortiClient Linux SSLVPN (1), FortiClientMac (3), FortiClientMacOS (1), FortiClient Online Installer (1), FortiClientWindows (5), FortiConverter (1), FortiDDoS (1), FortiDDoS-F (2), FortiDDoS API (1), FortiDeceptor (7), FortiEDR (6), FortiEDR CollectorWindows (1), FortiExtender (3), FortiExtender Management Interface (1), FortiGate (8), FortiGuest (1), FortiIsolator (4), FortiMail (28), FortiMail Admin WebUI (2), FortiMail Webmail (1), FortiManager (59), FortiManager GUI (1), FortiManager Management Interface (1), FortiManagerVM (1), FortiManager VM (1), FortiNAC (28), FortiNAC-F (5), FortiNAC Portal UI (1), FortiNDR (1), FortiOS (173), FortiOS SSL-VPN (1), FortiPAM (4), FortiPortal (26), FortiPortal GUI (1), FortiPortal Management Interface (1), FortiPresence (2), FortiPresence Infrastructure Server (1), FortiProxy (48), FortiRecorder (5), FortiSIEM (16), FortiSIEM Windows Agent (3), FortiSOAR (9), FortiSandbox (33), FortiSwitch (5), FortiSwitch FSW (1), FortiSwitchManager (3), FortiTester (13), FortiTokenAndroid (1), FortiToken Mobile (1), FortiTokenWinApp (1), FortiTokeniOS (1), FortiVoice (2), FortiVoiceEnterprise (1), FortiVoiceEntreprise (1), FortiWAN (4), FortiWLC (10), FortiWLC-SD (1), FortiWLM (22), FortiWan (10), FortiWeb (76), FortiWebManager (2), FortiWeb webUI Certificate View Page (1), Fortiadc-400e (1), Fortigate FortiDB (1), Fortiguard Antivirus (1), Fortimail (1), Fortinet28 (1), Fortinet Antivirus (1), Fortinet firewall (1), FotiOS (2), IPS Engine (1), Internet Key Exchange (1), Manager (1), Meru AP (1), Single Sign On (1)

Link to Vendor Website: https://www.fortinet.com/

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2024-04-108.07.8Fortinet FortiClientMac Configuration File tmp privilege escalationNieznanyNot DefinedOfficial Fix0.000430.04CVE-2024-31492
2024-04-096.76.5Fortinet FortiManager Template Local Privilege EscalationNieznanyNot DefinedOfficial Fix0.000430.04CVE-2023-47542
2024-04-096.76.5Fortinet FortiOS CLI Format StringFirewall SoftwareNot DefinedOfficial Fix0.000430.04CVE-2023-48784
2024-04-098.88.6Fortinet FortiSandbox Requests privilege escalationNieznanyNot DefinedOfficial Fix0.000430.04CVE-2024-21755
2024-04-098.88.6Fortinet FortiSandbox Requests privilege escalationNieznanyNot DefinedOfficial Fix0.000430.05CVE-2024-21756
2024-04-096.76.5Fortinet FortiSandbox CLI privilege escalationNieznanyNot DefinedOfficial Fix0.000430.06CVE-2023-47540
2024-04-096.76.5Fortinet FortiSandbox CLI directory traversalNieznanyNot DefinedOfficial Fix0.000440.00CVE-2023-47541
2024-04-097.27.0Fortinet FortiSandbox HTTP Request directory traversalNieznanyNot DefinedOfficial Fix0.000440.07CVE-2024-23671
2024-04-099.29.0Fortinet FortiClient privilege escalationNieznanyNot DefinedOfficial Fix0.000430.09CVE-2023-45590
2024-04-095.45.3Fortinet FortiSandbox HTTP Request directory traversalNieznanyNot DefinedOfficial Fix0.000440.00CVE-2024-31487
2024-04-095.35.2Fortinet FortiOS/FortiProxy information disclosureFirewall SoftwareNot DefinedOfficial Fix0.000430.03CVE-2023-41677
2024-04-095.35.2Fortinet FortiOS HTTP Request information disclosureFirewall SoftwareNot DefinedOfficial Fix0.000430.14CVE-2024-23662
2024-03-125.65.6Fortinet FortiOS/FortiProxy privilege escalationFirewall SoftwareNot DefinedOfficial Fix0.000450.04CVE-2024-23112
2024-03-124.34.2Fortinet FortiPortal privilege escalationNieznanyNot DefinedOfficial Fix0.000450.06CVE-2024-21761
2024-03-127.17.0Fortinet FortiOS FortiAuthenticator HA weak authenticationFirewall SoftwareNot DefinedOfficial Fix0.000500.00CVE-2023-46717
2024-03-128.58.4Fortinet FortiClientEMS Packets sql injectionNieznanyNot DefinedOfficial Fix0.562220.09CVE-2023-48788
2024-03-128.28.1Fortinet FortiClientEMS Packets privilege escalationNieznanyNot DefinedOfficial Fix0.000910.00CVE-2023-47534
2024-03-126.76.5Fortinet FortiManager/FortiAnalyzer/FortiPortal Command Argument Format StringNieznanyNot DefinedOfficial Fix0.000430.04CVE-2023-41842
2024-03-129.29.1Fortinet FortiManager HTTP Request privilege escalationNieznanyNot DefinedOfficial Fix0.000910.00CVE-2023-36554
2024-03-128.17.9Fortinet FortiOS/FortiProxy/FortiSwitchManager/FortiPAM HTTP Request memory corruptionFirewall SoftwareNot DefinedOfficial Fix0.000880.00CVE-2023-42790
2024-03-129.89.6Fortinet FortiOS/FortiPAM/FortiProxy HTTP Request memory corruptionFirewall SoftwareNot DefinedOfficial Fix0.000910.00CVE-2023-42789
2024-02-209.39.1Fortinet FortiManager/FortiAnalyzer HTTP Request directory traversalNieznanyNot DefinedOfficial Fix0.000430.04CVE-2023-42791
2024-02-155.15.1Fortinet FortiNAC Policy Audit Log cross site scriptingNieznanyNot DefinedOfficial Fix0.000460.04CVE-2023-26206
2024-02-153.83.8Fortinet FortiManager/FortiAnalyzer HTTP information disclosureNieznanyNot DefinedOfficial Fix0.000450.00CVE-2023-44253
2024-02-157.77.6Fortinet FortiClientEMS HTTP privilege escalationNieznanyNot DefinedOfficial Fix0.000500.04CVE-2023-45581

695 więcej wpisów nie jest pokazywanych

Might our Artificial Intelligence support you?

Check our Alexa App!