CVE-2016-6909

EPSS 49.9%

Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request, aka EGREGIOUSBLUNDER.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 3

cve_referencepacketstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.htmlnão verificado cve_referencewww.exploit-db.com/exploits/40276/não verificado exploitdbwww.exploit-db.com/exploits/40276não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://fortiguard.com/advisory/FG-IR-16-023 http://packetstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.html https://musalbas.com/2016/08/16/equation-group-firewall-operations-catalogue.html https://www.exploit-db.com/exploits/40276/http://www.securityfocus.com/bid/92523 http://www.securitytracker.com/id/1036643