CVSS 9.8 · Critical EPSS 0,60%
Kerentanan Missing Authentication for Critical Function pada fortinet fortios, fortinet fortipam +4 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.
A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14, FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.0 through 7.0.3, FortiPortal version 6.0.0 through 6.0.14, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| fortinet | fortios | Versi 6.0.0 hingga sebelum 7.0.15 |
| fortinet | fortios | Versi 7.2.0 hingga sebelum 7.2.8 |
| fortinet | fortios | Versi 7.4.0 hingga sebelum 7.4.4 |
| fortinet | fortipam | Versi 1.0.0 hingga sebelum 1.3.0 |
| fortinet | fortiproxy | Versi 1.0.0 hingga sebelum 7.0.17 |
| fortinet | fortiproxy | Versi 7.2.0 hingga sebelum 7.2.10 |
| fortinet | fortiproxy | Versi 7.4.0 hingga sebelum 7.4.4 |
| fortinet | fortimanager | Versi 6.4.0 hingga sebelum 6.4.15 |
| fortinet | fortimanager | Versi 7.0.0 hingga sebelum 7.0.12 |
| fortinet | fortimanager | Versi 7.2.0 hingga sebelum 7.2.5 |
| fortinet | fortimanager | Versi 7.4.0 hingga sebelum 7.4.3 |
| fortinet | fortiswitchmanager | Versi 7.0.0 hingga sebelum 7.0.4 |
| fortinet | fortiswitchmanager | Versi 7.2.0 hingga sebelum 7.2.4 |
| fortinet | fortiportal | Versi 5.3.0 hingga sebelum 6.0.15 |