Fortinet Fortiwan vulnerabilities

16 CVEs affecting Fortinet Fortiwan, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-26102, published 2024-12-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-26102, published 2024-12-19. Critical severity, CVSS 9.1. EPSS: 19.7% chance of exploitation in the next 30 days. A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted…
CVE-2016-4965, published 2016-09-21. High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days. Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges via the graph…
CVE-2016-4967, published 2016-09-21. Medium severity, CVSS 6.5. EPSS: 2.7% chance of exploitation in the next 30 days. Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to obtain sensitive information from (1) a backup of the device configuration via script/cfg_show.php or (2)…
CVE-2016-4968, published 2016-09-21. Medium severity, CVSS 6.5. EPSS: 2.7% chance of exploitation in the next 30 days. The linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request.
CVE-2016-4969, published 2016-09-21. Medium severity, CVSS 6.1. EPSS: 2.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP parameter to…
CVE-2016-4966, published 2016-09-21. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via vectors related to the UserName GET parameter.
CVE-2021-26112, published 2022-04-06. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to…
CVE-2021-26114, published 2022-04-06. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via…
CVE-2021-24009, published 2022-04-06. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary…
CVE-2022-33869, published 2023-02-16. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute…

Latest

CVE-2021-26115, published 2024-12-19. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to…
CVE-2023-44252, published 2023-12-13. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker…
CVE-2023-44251, published 2023-12-13. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version…
CVE-2021-32585, published 2022-04-06. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically…
CVE-2021-26113, published 2022-04-06. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess…
CVE-2021-32593, published 2022-04-06. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge…