CVE-2019-6697: An Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1, 6.0.0 through 6.0.6 in the hostname parameter of a DHCP…

PriorityP428medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.33%

25.1th percentile

An Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1, 6.0.0 through 6.0.6 in the hostname parameter of a DHCP packet under DHCP monitor page may allow an unauthenticated attacker in the same network as the FortiGate to perform a Stored Cross Site Scripting attack (XSS) by sending a crafted DHCP packet.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortigate	—	—
fortinet	fortios	—	—
fortinet	fortios	>= 6.0.0 < 6.0.7	6.0.7
fortinet	fortios	>= 6.2.0 < 6.2.2	6.2.2
fortinet	fortios	6.2.0 – 6.2.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.