CVE-2019-17656
CVE-2019-17656
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.4EPSS 1.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Apr 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2.2 and below and FortiProxy 1.0.x, 1.1.x, 1.2.9 and below, 2.0.0 and below may allow an authenticated remote attacker to crash the service by sending a malformed PUT request to the server. Fortinet is not aware of any successful exploitation of this vulnerability that would lead to code execution.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Affected products
Fortinet · Fortinet FortiProxy, FortiOSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →