Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v2mv-99jp-98vc

Опубликовано: 14 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted firmware image.

An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted firmware image.

EPSS

Процентиль: 19%
0.00059
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-354

Связанные уязвимости

CVSS3: 6.5
nvd
11 месяцев назад

An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted firmware image.

EPSS

Процентиль: 19%
0.00059
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-354