Lucene search
FortinetCVELIST:CVE-2020-29013HistoryApr 06, 2022 - 9:05 a.m.
CVE-2020-29013
2022-04-0609:05:11
fortinet
www.cve.org
1
fortisandbox
input validation
sniffer interface
vulnerability
authenticated attacker
crafted requests
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:F
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
29.6%
An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests.
CNA Affected
[
{
"product": "Fortinet FortiSandbox",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "FortiSandbox before 3.2.2"
}
]
}
]References
Related
nvd
nvd
CVE-2020-29013
2022-04-06 09:15:07
fortinet
fortinet
Insufficient validation logic in Fortisandbox sniffer's max file size
2021-09-07 00:00:00
cve
cve
CVE-2020-29013
2022-04-06 09:15:07
prion
prion
Input validation
2022-04-06 09:15:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:F
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
29.6%
Related for CVELIST:CVE-2020-29013