CVE-2015-7361: Critical severity fortios vulnerability
FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not require authentication for access to the ZebOS shell on the HA dedicated management interface, which allows remote attackers to obtain shell access via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7361?
CVE-2015-7361 is considered a high severity vulnerability due to the ability for remote attackers to gain unauthorized access to the ZebOS shell.
How do I fix CVE-2015-7361?
To address CVE-2015-7361, disable the dedicated management interface or implement strong access controls to restrict unauthorized access.
What systems are affected by CVE-2015-7361?
CVE-2015-7361 specifically affects FortiOS version 5.2.3 when configured for High Availability.
Can CVE-2015-7361 be exploited remotely?
Yes, CVE-2015-7361 can be exploited remotely by attackers who target the vulnerable dedicated management interface.
What happens if CVE-2015-7361 is not patched?
If CVE-2015-7361 is not patched, attackers can gain shell access and potentially compromise the device and network.