CVE-2017-17543

EPSS 0.4%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

26 abr 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak encryption algorithms.

Productos afectados

Fortinet, Inc. · FortiClient for Mac OSX Fortinet, Inc. · FortiClient for Windows Fortinet, Inc. · FortiClient SSLVPN Client for Linux

Referencias

https://fortiguard.com/advisory/FG-IR-17-214