|
FortiGuard IPS Event Name's Severity Level is mainly based on the ratings set forth by the Common Vulnerability Scoring System (CVSS). The CVSS is a vendor-neutral, industry standard that provides an open framework for communicating the characteristics and impacts of IT vulnerabilities.
| FortiGuard Severity Level | CVSS v2 Rating |
| Critical | 9 to10 |
| High | 7 to 8.9 |
| Medium | 4 to 6.9 |
| Low | 0.1 to 3.9 |
| Info | 0 |
Exceptions:
- If there is no CVSS rating posted, then the CVSS rating is calculated. A Base Score tool form is available at: http://nvd.nist.gov/cvss.cfm?vector=(AV:L/AC:M/Au:N/C:C/I:C/A:C)&version=2
- If the vulnerable software/system is not common in a business network environment and the FortiGuard Severity Level would normally be Critical, then the FortiGuard Severity Level may be reduced to High.
- If the vulnerability is a Denial of Service (DoS) attack and only affecting the availability of a remote service or host, then the FortiGuard Severity Level is adjusted to at most Medium for Client-side DoS and High for Server-side DoS
- For any "remote code execution" type of vulnerability, the FortiGuard Severity Level is set to either High or Critical.
- For identifying or detecting network traffic, the FortiGuard Severity Level is set to Informational.
- For a vulnerability/exploit that is highly active, the FortiGuard Severity Level is temporarily set to either High or Critical. Later, the level may be reduced back to its normal level; generally this is based on the temporal parameter of a vulnerability.
- For zero-day vulnerabilities where the rating has not yet been fully evaluated, the FortiGuard Severity Level is generally set at either Medium or High.
For more information on CVSS, visit A Complete Guide to the Common Vulnerability Scoring System Version 2.0.
| Common Vulnerability Scoring System Version 2.0 | | The Common Vulnerability Scoring System (CVSS) provides an open framework for communicating the characteristics and impacts of IT vulnerabilities. CVSS consists of 3 groups: Base, Temporal and Environmental. Each group produces a numeric score ranging from 0 to 10, and a Vector, a compressed textual representation that reflects the values used to derive the score. The Base group represents the intrinsic qualities of a vulnerability. The Temporal group reflects the characteristics of a vulnerability that change over time. The Environmental group represents the characteristics of a vulnerability that are unique to any user's environment. CVSS enables IT managers, vulnerability bulletin providers, security vendors, application vendors and researchers to all benefit by adopting this common language of scoring IT vulnerabilities. |
|
Disclaimer:
Although Fortinet has attempted to provide accurate information in these materials, Fortinet assumes no legal responsibility for the accuracy or completeness of the information. More specific information is available on request from Fortinet. Please note that Fortinet's product information does not constitute or contain any guarantee, warranty or legally binding representation, unless expressly identified as such in a duly signed writing. About Fortinet ( www.fortinet.com ):
Fortinet is the pioneer and leading provider of ASIC-accelerated unified threat management, or UTM, security systems, which are used by enterprises and service providers to increase their security while reducing total operating costs. Fortinet solutions were built from the ground up to integrate multiple levels of security protection--including firewall, antivirus, intrusion prevention, VPN, spyware prevention and anti-spam -- designed to help customers protect against network and content level threats. Leveraging a custom ASIC and unified interface, Fortinet solutions offer advanced security functionality that scales from remote office to chassis-based solutions with integrated management and reporting. Fortinet solutions have won multiple awards around the world and are the only security products that are certified in six programs by ICSA Labs: (Firewall, Antivirus, IPSec, SSL, Network IPS, and Anti-Spyware). Fortinet is privately held and based in Sunnyvale, California.
|
