CVE-2018-13366 — Sensitive Information Exposure in Fortinet Fortios

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 53.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Fortinet FortiosFortinet Fortios
Timeline
PublishedApr 9
Latest updateMay 14

Description

An information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows attacker to reveals serial number of FortiGate via hostname field defined in connection control setup packets of PPTP protocol.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDfortinet/fortios5.6.7+2
▶CVEListV5fortinet/fortinet_fortios5.6.7 and below, 6.0.1+1

🔴Vulnerability Details

2
GHSA
GHSA-xmmv-36rj-v7p3: An information disclosure vulnerability in Fortinet FortiOS 6↗2022-05-14
▶
CVEList
CVE-2018-13366: An information disclosure vulnerability in Fortinet FortiOS 6↗2019-04-09
▶

📋Vendor Advisories

1
Fortinet
An information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows attacker to reveals serial num...↗2019-04-09
▶