An improper validation of data in the FortiCloud service [CWE-20] in Fortinet FortiCloud before 7.2.1 allows a remote attacker to cause a denial of service by sending crafted data to the FortiCloud service. An improper validation of data in the FortiMail service [CWE-20] in Fortinet FortiMail before 7.2.1 allows a remote attacker to cause a denial of service by sending crafted data to the FortiMail service. An improper validation of data in the FortiWeb service [CWE-20] in Fortinet FortiWeb before 7.2.1 allows a remote attacker to cause a denial of service by sending crafted data to the FortiWeb service. An improper validation of data in the FortiHRS service [CWE-20] in Fortinet FortiHRS before 7.2.1 allows a remote attacker to cause a denial of service by sending crafted data to the FortiHRS service. An improper validation of data in the FortiDTA service [CWE-20] in Fortinet FortiDTA before 7.2.1 allows a remote attacker to cause a denial of service by sending crafted data to the FortiDTA service. An improper validation of data in the FortiSRD service [CWE-20] in Fortinet FortiSRD before 7.2.1 allows a remote attacker to cause a denial of service by sending crafted

Vulnerability overview

1. An improper validation of data in the FortiCloud service [CWE-20] in Fortinet FortiCloud before 7.2.1 allows a remote attacker to cause a denial of service by sending crafted data to the FortiCloud service.
2. An improper validation of data in the FortiMail service [CWE-20] in Fortinet FortiMail before 7.2.1 allows a remote attacker to cause a denial of service by sending crafted data to the FortiMail service.
3. An improper validation of data in the FortiWeb service [CWE-20] in Fortinet FortiWeb before 7.2.1 allows a remote attacker to cause a denial of service by sending crafted data to the FortiWeb service.
4. An improper validation of data in the FortiHRS service [CWE-20] in Fortinet HRS before 7.2.1 allows a remote attacker to cause a denial of service by sending crafted data to the HRS Service, which causes an HRS crash and potential file corruption on disk

Timeline

Published on: 09/09/2022 07:15:00 UTC
Last modified on: 09/13/2022 20:44:00 UTC

References