Actively exploited · Published Jan 22, 2019 · Assigned by fortinet
CVE-2018-13374
Medium 4.3 Exploited Ransomware
In plain English
A medium-severity incorrect permission assignment in Fortinet FortiOS, fortiADC from Fortinet. Attackers are actively exploiting it in the wild (listed by CISA on September 8, 2022). It has been used in ransomware campaigns. The chance it is exploited in the next 30 days is estimated at 38.1% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Sep 29, 2022.
Official description
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Fortinet FortiOS, fortiADC | FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 |
Weakness: CWE-732 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
- https://fortiguard.com/advisory/FG-IR-18-157 x_refsource_CONFIRM
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-13374 government-resource