FortiOSの脆弱性3件、悪用未確認で修正版あり
Summary
FortiOSにCVSS v3が9.0〜9.6の脆弱性3件が公表されました。認証なしで悪用される恐れのあるものを含みます。BGP・OSPF・HA構成のFortiGateなどの管理者は、版を確認して修正版へ更新してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
FortiOSにCVSS v3が9.0〜9.6の脆弱性3件が公表されました。認証なしで悪用される恐れのあるものを含みます。BGP・OSPF・HA構成のFortiGateなどの管理者は、版を確認して修正版へ更新してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| FortinetFortiOS |
8.0.0 – 8.0.1→ Not listed 7.6.0 – 7.6.7→ Not listed 7.4.0 – 7.4.12→ Not listed 7.2.0 – 7.2.13→ Not listed |
Not listed Not listed Not listed Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow a configured ibgp neighbor to send malicious/malformed attributes to all connected routers via a specially crafted request
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web psirt@fortinet.com
- web nvd.nist.gov
- web github.com