Описание
A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute arbitrary code via a specifically crafted firmware image.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
4.3 Medium
CVSS3
8.8 High
CVSS3
5.8 Medium
CVSS2
Дефекты
Связанные уязвимости
A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute arbitrary code via a specifically crafted firmware image.
Уязвимость процедуры проверки прошивки операционных систем FortiOS. межсетевого экрана веб-приложений FortiWeb, Ethernet-коммутаторов FortiSwitch и прокси-сервера FortiProxy, позволяющая нарушителю выполнить произвольный код
EPSS
4.3 Medium
CVSS3
8.8 High
CVSS3
5.8 Medium
CVSS2