FG-IR-20-188: Multiple heap corruption vulnerabilities in FSA's command shell
Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command line arguments.
Affected Software
Event History
Frequently Asked Questions
What is the severity of FG-IR-20-188?
The severity of FG-IR-20-188 is high due to the potential for authenticated attackers to exploit heap-based buffer overflows.
How do I fix FG-IR-20-188?
To fix FG-IR-20-188, update your FortiSandbox to the latest firmware version provided by Fortinet.
What systems are impacted by FG-IR-20-188?
FG-IR-20-188 affects multiple versions of the Fortinet FortiSandbox software.
What kind of attacks can exploit FG-IR-20-188?
FG-IR-20-188 can be exploited by authenticated attackers using specially crafted command line arguments to manipulate memory.
Is FG-IR-20-188 easy to exploit?
FG-IR-20-188 can be considered relatively easy to exploit for attackers with valid credentials and knowledge of the command shell.