Summary
Fortinet heeft kwetsbaarheden verholpen in FortiManager, FortiManager Cloud, FortiAnalyzer, FortiOS, FortiProxy, FortiPAM, FortiSRA, FortiSwitchManager en FortiWeb.
Details
Interpretaties
De kwetsbaarheden omvatten een OS Command Injection die lokale aanvallers in staat stelt om ongeautoriseerde code uit te voeren door CLI-commando-argumenten te manipuleren. Daarnaast zijn er kwetsbaarheden die het mogelijk maken voor aanvallers om ongeautoriseerde wijzigingen aan te brengen in globale dreigingsfeeds en om authenticatie te omzeilen, wat leidt tot administratieve toegang tot de apparaten. Ook zijn er kwetsbaarheden die kunnen leiden tot denial-of-service door het versturen van speciaal vervaardigde verzoeken. Deze kwetsbaarheden kunnen leiden tot controle over de getroffen systemen.
Oplossingen
Fortinet heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Vulnerabilities 9
-
Critical 9.0
A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager …
-
High 8.1
Openssh: regresshion - race condition in ssh allows rce/dos
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate…
-
High 7.6
An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in…
-
High 7.0
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.…
-
Medium 5.9
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…
-
Medium 5.9
Openssh: denial-of-service in openssh
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may k…
-
Medium 4.8
A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may al…
-
Low 3.4
A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 t…
-
Low 2.1
A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may all…
Revision history
-
#1.0.0
Initiele versie
References
-
Reference - cveprojectv5; nvd
https://fortiguard.fortinet.com/psirt/FG-IR-24-325
-
Reference - ncscclear
https://fortiguard.fortinet.com/psirt/FG-IR-24-381
-
Reference - ncscclear
https://fortiguard.fortinet.com/psirt/FG-IR-24-388
-
Reference - ncscclear
https://fortiguard.fortinet.com/psirt/FG-IR-23-167
-
Reference - certbundde
https://fortiguard.fortinet.com/psirt/FG-IR-23-490
-
Reference - ncscclear
https://fortiguard.fortinet.com/psirt/FG-IR-25-122
-
Reference - ncscclear
https://fortiguard.fortinet.com/psirt/FG-IR-24-472
-
Reference - ncscclear
https://fortiguard.fortinet.com/psirt/FG-IR-24-023
-
Reference - ncscclear
https://www.fortiguard.com/psirt/FG-IR-24-472