CPE Details
Fortinet FortiRecorder Firmware 2.7.1
2.7.1
2020-01-07
16h16 +00:00
16h16 +00:00
2020-01-07
16h16 +00:00
16h16 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:o:fortinet:fortirecorder_firmware:2.7.1:*:*:*:*:*:*:*
Informations
Vendor
fortinetProduct
fortirecorder_firmwareVersion
2.7.1Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWeb all versions 6.1, FortiWeb all versions 6.0, FortiRecorder version 6.4.0 through 6.4.3, FortiRecorder all versions 6.0, FortiRecorder all versions 2.7 may allow an authenticated user to read arbitrary files via specially crafted command arguments. | 5.5 |
Moyen |
||
| A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments. | 6.7 |
Moyen |
||
| Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device. | 9.8 |
Critique |
