Riskcovery

CVE-2017-14187

State
Published
Severity
Not scored
Published
May 24, 2018
Updated
Oct 25, 2024
Reserved
Sep 7, 2017

Read the record on cve.org

Description

A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary program to a command that is allowed to be run by the fnsysctl CLI command.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
FortiOSFortinet, Inc.
  • 5.6.0 to 5.6.2Affected
  • 5.4.0 to 5.4.8Affected
  • 5.2 and below versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.