CVE-2020-9295: High severity fortios vulnerability
FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below may not immediately detect certain types of malformed or non-standard RAR archives, potentially containing malicious files. Based on the samples provided, FortiClient will detect the malicious files upon trying extraction by real-time scanning and FortiGate will detect the malicious archive if Virus Outbreak Prevention is enabled.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9295?
CVE-2020-9295 has been marked as a medium severity vulnerability due to its potential to allow the execution of malicious files through malformed RAR archives.
How do I fix CVE-2020-9295?
To mitigate CVE-2020-9295, users should update FortiOS and FortiClient to the latest versions that include patches for the vulnerability.
What products are affected by CVE-2020-9295?
CVE-2020-9295 affects FortiOS versions 6.2 below 6.00142, versions 6.4 below 6.00144, and FortiClient version 6.2 below 6.00137.
What types of files does CVE-2020-9295 potentially allow through?
CVE-2020-9295 may allow the execution of malicious files contained in certain malformed or non-standard RAR archives.
Is immediate action required for CVE-2020-9295?
Yes, immediate action is advisable for CVE-2020-9295 to prevent potential exploitation through unpatched vulnerabilities.