Lucene search

FortinetCVE-2020-12818

HistorySep 24, 2020 - 3:15 p.m.

CVE-2020-12818

2020-09-2415:15:13

fortinet

web.nvd.nist.gov

cve-2020-12818

insufficient logging

vulnerability

fortigate

fortinet

unauthenticated attacker

ip addresses

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON

An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed.

Affected configurations

Nvd

Node

fortinetfortiosRange<6.4.1

AND

fortinetfortigate_1000dMatch-

fortinetfortigate_100eMatch-

fortinetfortigate_100fMatch-

fortinetfortigate_1100eMatch-

fortinetfortigate_1500dMatch-

fortinetfortigate_1800fMatch-

fortinetfortigate_2000eMatch-

fortinetfortigate_200eMatch-

fortinetfortigate_2200eMatch-

fortinetfortigate_3000dMatch-

fortinetfortigate_3300eMatch-

fortinetfortigate_3400eMatch-

fortinetfortigate_3600eMatch-

fortinetfortigate_3700dMatch-

fortinetfortigate_3960eMatch-

fortinetfortigate_3980eMatch-

fortinetfortigate_400eMatch-

fortinetfortigate_40fMatch-

fortinetfortigate_4200fMatch-

fortinetfortigate_5001dMatch-

fortinetfortigate_5001eMatch-

fortinetfortigate_5001e1Match-

fortinetfortigate_5053bMatch-

fortinetfortigate_5060Match-

fortinetfortigate_50eMatch-

fortinetfortigate_5144cMatch-

fortinetfortigate_600eMatch-

fortinetfortigate_60eMatch-

fortinetfortigate_60fMatch-

fortinetfortigate_6300fMatch-

fortinetfortigate_6500fMatch-

fortinetfortigate_7040eMatch-

fortinetfortigate_7060eMatch-

fortinetfortigate_80eMatch-

fortinetfortigate_80fMatch-

VendorProductVersionCPE
fortinetfortios*cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
fortinetfortigate_1000d-cpe:2.3:h:fortinet:fortigate_1000d:-:*:*:*:*:*:*:*
fortinetfortigate_100e-cpe:2.3:h:fortinet:fortigate_100e:-:*:*:*:*:*:*:*
fortinetfortigate_100f-cpe:2.3:h:fortinet:fortigate_100f:-:*:*:*:*:*:*:*
fortinetfortigate_1100e-cpe:2.3:h:fortinet:fortigate_1100e:-:*:*:*:*:*:*:*
fortinetfortigate_1500d-cpe:2.3:h:fortinet:fortigate_1500d:-:*:*:*:*:*:*:*
fortinetfortigate_1800f-cpe:2.3:h:fortinet:fortigate_1800f:-:*:*:*:*:*:*:*
fortinetfortigate_2000e-cpe:2.3:h:fortinet:fortigate_2000e:-:*:*:*:*:*:*:*
fortinetfortigate_200e-cpe:2.3:h:fortinet:fortigate_200e:-:*:*:*:*:*:*:*
fortinetfortigate_2200e-cpe:2.3:h:fortinet:fortigate_2200e:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fortinet	fortios	*	cpe:2.3:o:fortinet:fortios::::::::
fortinet	fortigate_1000d	-	cpe:2.3:h:fortinet:fortigate_1000d:-:::::::*
fortinet	fortigate_100e	-	cpe:2.3:h:fortinet:fortigate_100e:-:::::::*
fortinet	fortigate_100f	-	cpe:2.3:h:fortinet:fortigate_100f:-:::::::*
fortinet	fortigate_1100e	-	cpe:2.3:h:fortinet:fortigate_1100e:-:::::::*
fortinet	fortigate_1500d	-	cpe:2.3:h:fortinet:fortigate_1500d:-:::::::*
fortinet	fortigate_1800f	-	cpe:2.3:h:fortinet:fortigate_1800f:-:::::::*
fortinet	fortigate_2000e	-	cpe:2.3:h:fortinet:fortigate_2000e:-:::::::*
fortinet	fortigate_200e	-	cpe:2.3:h:fortinet:fortigate_200e:-:::::::*
fortinet	fortigate_2200e	-	cpe:2.3:h:fortinet:fortigate_2200e:-:::::::*

Rows per page:

1-10 of 361

CNA Affected

[
  {
    "product": "Fortinet FortiOS",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiOS before 6.4.1"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-20-033

www.fortiguard.com/psirt/FG-IR-20-033

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON

Related for CVE-2020-12818