CVE-2020-12818
published 2020-09-24CVE-2020-12818: An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go…
PriorityP429medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.90%
57.6th percentile
An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed.
Affected
40 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortigate | — | — |
| fortinet | fortigate1000d | — | — |
| fortinet | fortigate100e | — | — |
| fortinet | fortigate100f | — | — |
| fortinet | fortigate1100e | — | — |
| fortinet | fortigate1500d | — | — |
| fortinet | fortigate1800f | — | — |
| fortinet | fortigate2000e | — | — |
| fortinet | fortigate200e | — | — |
| fortinet | fortigate2200e | — | — |
| fortinet | fortigate3000d | — | — |
| fortinet | fortigate3300e | — | — |
| fortinet | fortigate3400e | — | — |
| fortinet | fortigate3600e | — | — |
| fortinet | fortigate3700d | — | — |
| fortinet | fortigate3960e | — | — |
| fortinet | fortigate3980e | — | — |
| fortinet | fortigate400e | — | — |
| fortinet | fortigate40f | — | — |
| fortinet | fortigate4200f | — | — |
| fortinet | fortigate5001d | — | — |
| fortinet | fortigate5001e | — | — |
| fortinet | fortigate5001e1 | — | — |
| fortinet | fortigate5053b | — | — |
| fortinet | fortigate5060 | — | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Fortinet
An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker t...
vendor_fortinet·2020-09-24·CVSS 5.3
CVE-2020-12818 [MEDIUM] An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker t...
FG-IR-20-033: An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker t...
An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed.
CVEs: CVE-2020-12818
CVSS: 5.3 (medium)
Affected products: FortiGate, FortiGate1000d, FortiGate100e, FortiGate100f, FortiGate1100e, FortiGate1500d, FortiGate1800f, FortiGate2000e, FortiGate200e, FortiGate2200e, FortiGate3000d, FortiGate3300e, FortiGate3400e, FortiGate3600e, FortiGate3700d, FortiGate3960e, FortiGate3980e, FortiGate400e, FortiGate40f, FortiGate4200f, FortiGate5001d, FortiGate5001e, FortiGate5001e1, FortiGate5053b, FortiGate5060, FortiGate50e, FortiGate5144c, FortiGate600e,
GHSA
GHSA-h946-qqgh-qhrr: An insufficient logging vulnerability in FortiGate before 6
ghsa_unreviewed·2022-05-24
CVE-2020-12818 [MEDIUM] GHSA-h946-qqgh-qhrr: An insufficient logging vulnerability in FortiGate before 6
An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-09-24
Published