CVE-2018-13371

HIGH

FortiOS < 5.4.10 - Authenticated Routing Settings Manipulation via ZebOS Component

Title source: llm
STIX 2.1

Description

An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://fortiguard.com/advisory/FG-IR-18-230

Scores

CVSS v3 8.8
EPSS 0.0053
EPSS Percentile 67.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-20
Status published
Products (1)
fortinet/fortios < 5.4.10
Published Apr 02, 2020
Tracked Since Feb 18, 2026