CVE-2019-15705 — Improper Input Validation in Fortinet Fortios

CWE-20 — Improper Input Validation4 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.6%
top 31.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Fortinet FortiosFortinet Fortigate
Timeline
PublishedNov 27
Latest updateMay 24

Description

An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and below may allow an unauthenticated remote attacker to crash the SSL VPN service by sending a crafted POST request.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDfortinet/fortios6.2.0 — 6.2.1+1
▶CVEListV5fortinet/fortigateFortiOS versions 6.0.6 and below, FortiOS versions 6.2.1 and below+1

🔴Vulnerability Details

2
GHSA
GHSA-mrc8-q5x7-fjr7: An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6↗2022-05-24
▶
CVEList
CVE-2019-15705: An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6↗2019-11-27
▶

📋Vendor Advisories

1
Fortinet
An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and belo...↗2019-11-27
▶
CVE-2019-15705 — Improper Input Validation in Fortinet | cvebase