CVE-2015-1452 — Fortinet Fortios vulnerability

CWE-173 documents3 sources
Severity
7.8HIGHNVD
EPSS
1.0%
top 23.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Fortinet Fortios
Timeline
PublishedFeb 2
Latest updateMay 17

Description

The Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5.0 Patch 7 build 4457 allows remote attackers to cause a denial of service (locked CAPWAP Access Controller) via a large number of ClientHello DTLS messages.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

▶NVDfortinet/fortios5.0.7

🔴Vulnerability Details

2
GHSA
GHSA-jfjv-qmg2-v4v8: The Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5↗2022-05-17
▶
CVEList
CVE-2015-1452: The Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5↗2015-02-02
▶
CVE-2015-1452 — Fortinet Fortios vulnerability | cvebase