CVE-2020-12818: FortiGate fails to log traffic for Fortinet owned IP address range
Published Sep 24, 2020
·Updated
An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed.
Affected Software
36 affected components
Fortinet FortiOS<6.4.1
Fortinet Fortigate 1000d
Fortinet Fortigate 100e
Fortinet Fortigate 100f
Fortinet Fortigate 1100e
Fortinet Fortigate 1500d
Fortinet Fortigate 1800f
Fortinet Fortigate 2000e
Fortinet Fortigate 200e
Fortinet Fortigate 2200e
Fortinet Fortigate 3000d
Fortinet Fortigate 3300e
Fortinet Fortigate 3400e
Fortinet Fortigate 3600e
Fortinet Fortigate 3700d
Fortinet Fortigate 3960e
Fortinet Fortigate 3980e
Fortinet Fortigate 400e
Fortinet Fortigate 40f
Fortinet Fortigate 4200f
Fortinet Fortigate 5001d
Fortinet Fortigate 5001e
Fortinet Fortigate 5001e1
Fortinet Fortigate 5053b
Fortinet Fortigate 5060
Fortinet Fortigate 50e
Fortinet Fortigate 5144c
Fortinet Fortigate 600e
Fortinet Fortigate 60e
Fortinet Fortigate 60f
Fortinet Fortigate 6300f
Fortinet Fortigate 6500f
Fortinet Fortigate 7040e
Fortinet Fortigate 7060e
Fortinet Fortigate 80e
Fortinet Fortigate 80f
Event History
Sep 24, 2020
Advisory Published
via FortiGuard·12:00 AM
Data Sourced
via FortiGuard·12:00 AM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·01:30 PM
Data Sourced
via MITRE·01:30 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-12818?
The severity of CVE-2020-12818 is characterized as a medium risk due to insufficient logging which could allow unauthorized traffic to go unnoticed.
2
How do I fix CVE-2020-12818?
To fix CVE-2020-12818, upgrade your FortiGate devices to FortiOS version 6.4.1 or later.
3
What impact does CVE-2020-12818 have on my system?
CVE-2020-12818 may allow an unauthenticated attacker to exploit unlogged traffic, potentially leading to undetected unauthorized access.
4
Who is affected by CVE-2020-12818?
CVE-2020-12818 affects FortiGate devices running FortiOS versions prior to 6.4.1.
5
Is CVE-2020-12818 actively exploited in the wild?
There is currently no widely reported evidence of active exploitation of CVE-2020-12818 in the wild.