Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x3p7-q669-8j5v

Опубликовано: 07 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML data to an arbitrary victim via crafted TCP requests, potentially flooding the victim.

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML data to an arbitrary victim via crafted TCP requests, potentially flooding the victim.

EPSS

Процентиль: 16%
0.00051
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 6.8
nvd
больше 3 лет назад

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML data to an arbitrary victim via crafted TCP requests, potentially flooding the victim.

EPSS

Процентиль: 16%
0.00051
Низкий

7.5 High

CVSS3