FG-IR-20-178: Insufficient validation logic in Fortisandbox sniffer's max file size
An improper input validation vulnerability in the sniffer interface of FortiSandbox may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of FG-IR-20-178?
The severity of FG-IR-20-178 is considered medium due to the potential for authenticated attackers to exploit the vulnerability.
How do I fix FG-IR-20-178?
To fix FG-IR-20-178, update the FortiSandbox to the latest firmware version as recommended by Fortinet.
What type of attacks can exploit FG-IR-20-178?
FG-IR-20-178 can be exploited through specially crafted requests by an authenticated attacker to halt the sniffer interface.
Who is affected by FG-IR-20-178?
FG-IR-20-178 affects users of FortiSandbox firmware versions where the sniffer interface is utilized.
Is FG-IR-20-178 a zero-day vulnerability?
FG-IR-20-178 is not classified as a zero-day vulnerability since it has been publicly disclosed and a fix is available.