An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests.
Una vulnerabilidad de desbordamiento de entero o envolvente [CWE-190] en FortiOS versión 7.6.2 y anteriores, versión 7.4.7 y anteriores, versión 7.2.10 y anteriores, 7.2 todas las versiones, 6.4 todas las versiones, FortiProxy versión 7.6.2 y anteriores, versión 7.4.3 y anteriores, 7.2 todas las versiones, 7.0 todas las versiones, 2.0 todas las versiones y FortiPAM versión 1.5.0, versión 1.4.2 y anteriores, 1.3 todas las versiones, 1.2 todas las versiones, 1.1 todas las versiones, 1.0 todas las versiones Los marcadores SSL-VPN RDP y VNC pueden permitir que un usuario autenticado afecte la disponibilidad de SSL-VPN del dispositivo a través de solicitudes manipuladas.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-190
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| fortinet | fortios | * | <built-in method update of dict object at 0x7fd3695dbf80> | Operating System |
| fortinet | fortios | * | <built-in method update of dict object at 0x7fd348c90ec0> | Operating System |
| fortinet | fortios | * | <built-in method update of dict object at 0x7fd39c409b80> | Operating System |
| fortinet | fortipam | * | <built-in method update of dict object at 0x7fd2dbd50c00> | Operating System |
| fortinet | fortipam | 1.5.0 | <built-in method update of dict object at 0x7fd36b59e740> | Operating System |
| fortinet | fortiproxy | * | <built-in method update of dict object at 0x7fd34122f7c0> | Application |
| fortinet | fortiproxy | * | <built-in method update of dict object at 0x7fd2d399ae40> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* |