CVE-2020-12818

An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://fortiguard.com/advisory/FG-IR-20-033	Vendor Advisory
https://www.fortiguard.com/psirt/FG-IR-20-033	Vendor Advisory
https://fortiguard.com/advisory/FG-IR-20-033	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:fortinet:fortigate_1000d:-:::::::*
	cpe:2.3:h:fortinet:fortigate_100e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_100f:-:::::::*
	cpe:2.3:h:fortinet:fortigate_1100e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_1500d:-:::::::*
	cpe:2.3:h:fortinet:fortigate_1800f:-:::::::*
	cpe:2.3:h:fortinet:fortigate_2000e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_200e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_2200e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_3000d:-:::::::*
	cpe:2.3:h:fortinet:fortigate_3300e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_3400e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_3600e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_3700d:-:::::::*
	cpe:2.3:h:fortinet:fortigate_3960e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_3980e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_400e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_40f:-:::::::*
	cpe:2.3:h:fortinet:fortigate_4200f:-:::::::*
	cpe:2.3:h:fortinet:fortigate_5001d:-:::::::*
	cpe:2.3:h:fortinet:fortigate_5001e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_5001e1:-:::::::*
	cpe:2.3:h:fortinet:fortigate_5053b:-:::::::*
	cpe:2.3:h:fortinet:fortigate_5060:-:::::::*
	cpe:2.3:h:fortinet:fortigate_50e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_5144c:-:::::::*
	cpe:2.3:h:fortinet:fortigate_600e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_60e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_60f:-:::::::*
	cpe:2.3:h:fortinet:fortigate_6300f:-:::::::*
	cpe:2.3:h:fortinet:fortigate_6500f:-:::::::*
	cpe:2.3:h:fortinet:fortigate_7040e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_7060e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_80e:-:::::::*
	cpe:2.3:h:fortinet:fortigate_80f:-:::::::*

History

21 Nov 2024, 05:00

Type	Values Removed	Values Added
References	~~() https://fortiguard.com/advisory/FG-IR-20-033 - Vendor Advisory~~	() https://fortiguard.com/advisory/FG-IR-20-033 - Vendor Advisory

Information

Published : 2020-09-24 15:15

Updated : 2024-11-21 05:00

NVD link : CVE-2020-12818

Mitre link : CVE-2020-12818

CVE.ORG link : CVE-2020-12818

JSON object : View

Products Affected

fortinet

fortigate_1800f
fortigate_4200f
fortigate_100e
fortigate_5001d
fortigate_50e
fortigate_5060
fortigate_1100e
fortigate_7040e
fortigate_2000e
fortigate_5144c
fortigate_3000d
fortios
fortigate_3980e
fortigate_1000d
fortigate_6500f
fortigate_3700d
fortigate_2200e
fortigate_60f
fortigate_40f
fortigate_80f
fortigate_5001e1
fortigate_100f
fortigate_6300f
fortigate_80e
fortigate_200e
fortigate_1500d
fortigate_600e
fortigate_7060e
fortigate_60e
fortigate_400e
fortigate_3600e
fortigate_3960e
fortigate_3300e
fortigate_5001e
fortigate_5053b
fortigate_3400e

CWE

NVD-CWE-Other

{"id": "CVE-2020-12818", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2020-09-24T15:15:13.237", "references": [{"url": "https://fortiguard.com/advisory/FG-IR-20-033", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}, {"url": "https://www.fortiguard.com/psirt/FG-IR-20-033", "tags": ["Vendor Advisory"], "source": "nvd@nist.gov"}, {"url": "https://fortiguard.com/advisory/FG-IR-20-033", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed."}, {"lang": "es", "value": "Una vulnerabilidad de registro insuficiente en FortiGate versiones anteriores a 6.4.1, puede permitir que el tr\u00e1fico de un atacante no autenticado hacia direcciones IP propiedad de Fortinet pase desapercibido."}], "lastModified": "2024-11-21T05:00:20.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "366223BF-F61D-4AC7-A884-D6FB48CD47A7", "versionEndExcluding": "6.4.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:fortinet:fortigate_1000d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "64F7589C-F20B-4222-B859-78D15C457CE5"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_100e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5E4BAC86-6E1C-4ECE-8E41-789A6A617A40"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_100f:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "561D84F5-E3D4-4293-AC13-26D2E217D970"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_1100e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "648723EC-E144-4975-8D23-A4BB5EF6F07A"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_1500d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D8C8DA5D-9CB6-4BA6-BB8B-F41501726AF9"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_1800f:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "76792D6F-B647-43A8-8A60-17BE35824BF7"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_2000e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "92C3D2D8-A79C-4D10-B72E-D71EA3EB06F4"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_200e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F3D08C3F-51A4-44CF-BB85-A00536FAADAE"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_2200e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0B2A9D43-348B-45DB-94F7-825B29141F09"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_3000d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C79E67E1-8A10-4AD3-A6F5-9E82890216B3"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_3300e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0CCCA9CD-2B75-46AF-989C-C300CB53358E"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_3400e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CD1CDB68-B412-45E2-9AC4-F2A6E5300AA4"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_3600e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5015D2E8-8482-467A-96F4-65CBF0AFAC6E"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_3700d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "431E4C52-4BBF-48BA-867B-32D1405A5863"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_3960e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A3E816AC-57B5-4460-AF88-300EB72B5A8A"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_3980e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BF54E933-526F-4E65-A6B1-455389525F27"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_400e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A197765B-E9B4-4E5A-918D-C0C4B679CBA6"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_40f:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "96C31DB1-CEBD-4796-9CF1-5D9D000A5A9A"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_4200f:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "326DF840-7BEE-44D3-A8B8-DCE1A673A2C2"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_5001d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B35A82B1-ABA8-493D-9E89-E253CDD10472"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_5001e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "922E4449-EB12-444E-9E8C-C67FA537F1BD"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_5001e1:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "302638DB-0FA0-4804-9FC8-CCD20430B08F"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_5053b:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F5B0C1E0-CA41-4A31-A42D-FB25090EC6CB"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_5060:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2A78FF2E-986E-439E-A787-0A14E7EE78CC"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_50e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AB3BE8B3-F83D-4C89-AA5C-9B6819128138"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_5144c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "20B656F3-C696-48A9-9E1C-6F628E246F48"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_600e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "360F94B1-BFBC-455A-84D4-2E5F90DC0E61"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_60e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "33F4AB8A-21B9-4969-92B3-250BF7414175"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_60f:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2D32F0C5-2949-48B6-B9DD-F070DE11C803"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_6300f:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8C87112F-4971-4A57-98E6-8057A758F7E7"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_6500f:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4EA7B3B0-C101-406D-AAF4-C7CF86075EA6"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_7040e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "68E575C9-D2C9-476B-91BB-D49C6FB62351"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_7060e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1786CFE3-300C-4891-A55F-06BB0D0B67D7"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_80e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "68866893-6942-4FF6-88E8-4BEB610AD6FE"}, {"criteria": "cpe:2.3:h:fortinet:fortigate_80f:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "906455AD-D91C-47D6-A244-33B43ECB0A74"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@fortinet.com"}

5.3 /10

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

JSON object

Attach tags to CVE-2020-12818

5.3^/10

5.0^/10

Attach tags to `CVE-2020-12818`