Unpriviledge user can connect to zebos
Fortinet PSIRT Advisories
Fortinet PSIRT Contact:
Website: https://fortiguard.fortinet.com/faq/psirt-contact
FG-IR-18-230
Final
1
1
2019-04-04T00:00:00
Current version
2019-04-04T00:00:00
2019-04-04T00:00:00
An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component.
Execute unauthorized code or commands
FortiOS version 6.0.0 through 6.0.2FortiOS version 5.6.0 through 5.6.7FortiOS version 5.4.0 through 5.4.10FortiOS version 5.2.0 through 5.2.12FortiOS 5.0 all versionsFortiOS 4.3 all versionsFortiOS 4.2 all versionsFortiOS 4.1 all versionsFortiOS 4.0 all versions
Upgrade to FortiOS version 6.0.3 or above Upgrade to FortiOS version 5.6.8 and aboveUpgrade to upcoming FortiOS version 5.4.11 and above
Fortinet thanks Thomas Hochmuth for reporting this vulnerability.
FortiOS 6.0.2
FortiOS 6.0.1
FortiOS 6.0.0
FortiOS 5.6.7
FortiOS 5.6.6
FortiOS 5.6.5
FortiOS 5.6.4
FortiOS 5.6.3
FortiOS 5.6.2
FortiOS 5.6.1
FortiOS 5.6.0
FortiOS 5.4.10
FortiOS 5.4.9
FortiOS 5.4.8
FortiOS 5.4.7
FortiOS 5.4.6
FortiOS 5.4.5
FortiOS 5.4.4
FortiOS 5.4.3
FortiOS 5.4.2
FortiOS 5.4.1
FortiOS 5.4.0
FortiOS 5.2.12
FortiOS 5.2.11
FortiOS 5.2.10
FortiOS 5.2.9
FortiOS 5.2.8
FortiOS 5.2.7
FortiOS 5.2.6
FortiOS 5.2.5
FortiOS 5.2.4
FortiOS 5.2.3
FortiOS 5.2.2
FortiOS 5.2.1
FortiOS 5.2.0
FortiOS 5.0.14
FortiOS 5.0.13
FortiOS 5.0.12
FortiOS 5.0.11
FortiOS 5.0.10
FortiOS 5.0.9
FortiOS 5.0.8
FortiOS 5.0.7
FortiOS 5.0.6
FortiOS 5.0.5
FortiOS 5.0.4
FortiOS 5.0.3
FortiOS 5.0.2
FortiOS 5.0.1
FortiOS 5.0.0
FortiOS 4.3.19
FortiOS 4.3.18
FortiOS 4.3.17
FortiOS 4.3.16
FortiOS 4.3.15
FortiOS 4.3.14
FortiOS 4.3.13
FortiOS 4.3.12
FortiOS 4.3.11
FortiOS 4.3.10
FortiOS 4.3.9
FortiOS 4.3.8
FortiOS 4.3.7
FortiOS 4.3.6
FortiOS 4.3.5
FortiOS 4.3.4
FortiOS 4.3.3
FortiOS 4.3.2
FortiOS 4.3.1
FortiOS 4.3.0
FortiOS 4.2.16
FortiOS 4.2.15
FortiOS 4.2.14
FortiOS 4.2.13
FortiOS 4.2.12
FortiOS 4.2.11
FortiOS 4.2.10
FortiOS 4.2.9
FortiOS 4.2.8
FortiOS 4.2.7
FortiOS 4.2.6
FortiOS 4.2.5
FortiOS 4.2.4
FortiOS 4.2.3
FortiOS 4.2.2
FortiOS 4.2.1
FortiOS 4.2.0
FortiOS 4.1.11
FortiOS 4.1.10
FortiOS 4.1.9
FortiOS 4.1.8
FortiOS 4.1.7
FortiOS 4.1.6
FortiOS 4.1.5
FortiOS 4.1.4
FortiOS 4.1.3
FortiOS 4.1.2
FortiOS 4.1.1
FortiOS 4.0.4
FortiOS 4.0.3
FortiOS 4.0.2
FortiOS 4.0.1
FortiOS 4.0.0
Unpriviledge user can connect to zebos
CVE-2018-13371
FortiOS-6.0.2
FortiOS-6.0.1
FortiOS-6.0.0
FortiOS-5.6.7
FortiOS-5.6.6
FortiOS-5.6.5
FortiOS-5.6.4
FortiOS-5.6.3
FortiOS-5.6.2
FortiOS-5.6.1
FortiOS-5.6.0
FortiOS-5.4.10
FortiOS-5.4.9
FortiOS-5.4.8
FortiOS-5.4.7
FortiOS-5.4.6
FortiOS-5.4.5
FortiOS-5.4.4
FortiOS-5.4.3
FortiOS-5.4.2
FortiOS-5.4.1
FortiOS-5.4.0
FortiOS-5.2.12
FortiOS-5.2.11
FortiOS-5.2.10
FortiOS-5.2.9
FortiOS-5.2.8
FortiOS-5.2.7
FortiOS-5.2.6
FortiOS-5.2.5
FortiOS-5.2.4
FortiOS-5.2.3
FortiOS-5.2.2
FortiOS-5.2.1
FortiOS-5.2.0
FortiOS-5.0.14
FortiOS-5.0.13
FortiOS-5.0.12
FortiOS-5.0.11
FortiOS-5.0.10
FortiOS-5.0.9
FortiOS-5.0.8
FortiOS-5.0.7
FortiOS-5.0.6
FortiOS-5.0.5
FortiOS-5.0.4
FortiOS-5.0.3
FortiOS-5.0.2
FortiOS-5.0.1
FortiOS-5.0.0
FortiOS-4.3.19
FortiOS-4.3.18
FortiOS-4.3.17
FortiOS-4.3.16
FortiOS-4.3.15
FortiOS-4.3.14
FortiOS-4.3.13
FortiOS-4.3.12
FortiOS-4.3.11
FortiOS-4.3.10
FortiOS-4.3.9
FortiOS-4.3.8
FortiOS-4.3.7
FortiOS-4.3.6
FortiOS-4.3.5
FortiOS-4.3.4
FortiOS-4.3.3
FortiOS-4.3.2
FortiOS-4.3.1
FortiOS-4.3.0
FortiOS-4.2.16
FortiOS-4.2.15
FortiOS-4.2.14
FortiOS-4.2.13
FortiOS-4.2.12
FortiOS-4.2.11
FortiOS-4.2.10
FortiOS-4.2.9
FortiOS-4.2.8
FortiOS-4.2.7
FortiOS-4.2.6
FortiOS-4.2.5
FortiOS-4.2.4
FortiOS-4.2.3
FortiOS-4.2.2
FortiOS-4.2.1
FortiOS-4.2.0
FortiOS-4.1.11
FortiOS-4.1.10
FortiOS-4.1.9
FortiOS-4.1.8
FortiOS-4.1.7
FortiOS-4.1.6
FortiOS-4.1.5
FortiOS-4.1.4
FortiOS-4.1.3
FortiOS-4.1.2
FortiOS-4.1.1
FortiOS-4.0.4
FortiOS-4.0.3
FortiOS-4.0.2
FortiOS-4.0.1
FortiOS-4.0.0
7.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:F/RL:X/RC:X
https://fortiguard.fortinet.com/psirt/FG-IR-18-230
Unpriviledge user can connect to zebos
Reference>