Описание
A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and below may allow an authenticated attacker to potentially execute unauthorized code or commands via specifically crafted HTTP requests.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 3.1.0 (включая) до 3.1.4 (включая)Версия от 3.2.0 (включая) до 3.2.3 (исключая)
Одно из
cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*
EPSS
Процентиль: 42%
0.00201
Низкий
6.8 Medium
CVSS3
8.8 High
CVSS3
Дефекты
CWE-358
CWE-787
Связанные уязвимости
CVSS3: 6.8
github
11 месяцев назад
A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and below may allow an authenticated attacker to potentially execute unauthorized code or commands via specifically crafted HTTP requests.
EPSS
Процентиль: 42%
0.00201
Низкий
6.8 Medium
CVSS3
8.8 High
CVSS3
Дефекты
CWE-358
CWE-787