CVE

CVE-2018-13379

P1⬤ KNOWN RANSOMWARE USE

Fortinet FortiOS SSL VPN Path Traversal Vulnerability

Fortinet · FortiOS

Date added (CISA)

2021-11-03

Remediation due

2022-05-03

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.

Source: NVD ↗ · CISA KEV Catalog ↗