Fortinet Products: Multiple Vulnerabilities
A BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Security Advisories) ·
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key insight
The BSI advisory aggregates several vulnerabilities in core Fortinet management and security components, whose compromise could undermine control over the entire network perimeter.
Description
The BSI warning and information service reports multiple vulnerabilities in Fortinet FortiOS, FortiManager, FortiMail, FortiAnalyzer and FortiAuthenticator. An attacker can exploit these to execute arbitrary code, bypass security mechanisms, escalate privileges, manipulate data, or cause a denial of service. Affected are both firewall/gateway components and central management and authentication systems, which typically hold high privileges. The advisory does not list CVE IDs and provides no information on active exploitation; severity and details derive from the underlying vendor information. No details on KEV status or public PoCs are given in the report.
Risk score
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 0.00
- industry weight
- 1.21
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- 0.00
Path: operational