Vulnerabilities > CVE-2022-27491 - Unspecified vulnerability in Fortinet Fortios

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

fortinet

NVD

Published: 2022-09-06

Updated: 2022-09-09

Summary

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML data to an arbitrary victim via crafted TCP requests, potentially flooding the victim.

Vulnerable Configurations

Part	Description	Count
OS	Fortinet Fortinet Fortios 6.0.0 Fortinet Fortios 6.0.1 Fortinet Fortios 6.0.2 Fortinet Fortios 6.0.3 Fortinet Fortios 6.0.4 Fortinet Fortios 6.0.5 Fortinet Fortios 6.0.6 Fortinet Fortios 6.0.7 Fortinet Fortios 6.0.8 Fortinet Fortios 6.0.9 Fortinet Fortios 6.0.10 Fortinet Fortios 6.0.11 Fortinet Fortios 6.0.12 Fortinet Fortios 6.0.13 Fortinet Fortios 6.0.14 Fortinet Fortios 6.4.0 Fortinet Fortios 6.4.1 Fortinet Fortios 6.2.0 Fortinet Fortios 6.2.1 Fortinet Fortios 6.2.2 Fortinet Fortios 6.2.3 Fortinet Fortios 6.2.4 Fortinet Fortios 6.2.5 Fortinet Fortios 6.2.6 Fortinet Fortios 6.2.7 Fortinet Fortios 6.2.8 Fortinet Fortios 6.2.9 Fortinet Fortios 6.2.10 Fortinet Fortios 7.2.0 Fortinet Fortios 7.0.0 Fortinet Fortios 7.0.1 Fortinet Fortios 7.0.2 Fortinet Fortios 7.0.3 Fortinet Fortios 7.0.4 Fortinet Fortios 7.0.5 Fortinet Fortios 7.0.6	36

References

https://fortiguard.com/psirt/FG-IR-22-073