CVE-2017-3130: Infoleak
Published Aug 10, 2017
·Updated
An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.
Affected Software
32 affected components
Fortinet FortiOS=5.0.0
Fortinet FortiOS=5.0.1
Fortinet FortiOS=5.0.2
Fortinet FortiOS=5.0.3
Fortinet FortiOS=5.0.4
Fortinet FortiOS=5.0.5
Fortinet FortiOS=5.0.6
Fortinet FortiOS=5.0.7
Fortinet FortiOS=5.0.8
Fortinet FortiOS=5.0.9
Fortinet FortiOS=5.0.10
Fortinet FortiOS=5.0.11
Fortinet FortiOS=5.0.12
Fortinet FortiOS=5.0.13
Fortinet FortiOS=5.0.14
Fortinet FortiOS=5.2.0
Fortinet FortiOS=5.2.1
Fortinet FortiOS=5.2.2
Fortinet FortiOS=5.2.3
Fortinet FortiOS=5.2.4
Fortinet FortiOS=5.2.5
Fortinet FortiOS=5.2.6
Fortinet FortiOS=5.2.7
Fortinet FortiOS=5.2.8
Fortinet FortiOS=5.2.9
Fortinet FortiOS=5.2.10
Fortinet FortiOS=5.4.0
Fortinet FortiOS=5.4.1
Fortinet FortiOS=5.4.2
Fortinet FortiOS=5.4.3
Fortinet FortiOS=5.4.4
Fortinet FortiOS=5.6.0
Event History
Aug 10, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-3130?
CVE-2017-3130 is classified as an information disclosure vulnerability.
2
How do I fix CVE-2017-3130?
To fix CVE-2017-3130, you should upgrade to FortiOS version 5.6.1 or higher.
3
What versions of Fortinet FortiOS are affected by CVE-2017-3130?
CVE-2017-3130 affects FortiOS versions 5.0.0 through 5.4.4 and 5.6.0.
4
What information can be disclosed due to CVE-2017-3130?
CVE-2017-3130 allows an attacker to retrieve the FortiOS version information through IKE VendorID packets.
5
Is CVE-2017-3130 a remote vulnerability?
Yes, CVE-2017-3130 can be exploited remotely by attackers inspecting IKE packets.