VULNERABILITY INTELLIGENCE
CVE-2018-13371
CVSS score8.8 HIGH
EPSS probability1.31%
CISA KEVNot currently listed
Published2020-04-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- psirt@fortinet.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory