Vulnerability Description
An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Fortios | < 6.4.1 |
| Fortinet | Fortigate 1000D | - |
| Fortinet | Fortigate 100E | - |
| Fortinet | Fortigate 100F | - |
| Fortinet | Fortigate 1100E | - |
| Fortinet | Fortigate 1500D | - |
| Fortinet | Fortigate 1800F | - |
| Fortinet | Fortigate 2000E | - |
| Fortinet | Fortigate 200E | - |
| Fortinet | Fortigate 2200E | - |
| Fortinet | Fortigate 3000D | - |
| Fortinet | Fortigate 3300E | - |
| Fortinet | Fortigate 3400E | - |
| Fortinet | Fortigate 3600E | - |
| Fortinet | Fortigate 3700D | - |
| Fortinet | Fortigate 3960E | - |
| Fortinet | Fortigate 3980E | - |
| Fortinet | Fortigate 400E | - |
| Fortinet | Fortigate 40F | - |
| Fortinet | Fortigate 4200F | - |
References
- https://fortiguard.com/advisory/FG-IR-20-033Vendor Advisory
- https://www.fortiguard.com/psirt/FG-IR-20-033Vendor Advisory
- https://fortiguard.com/advisory/FG-IR-20-033Vendor Advisory
FAQ
What is CVE-2020-12818?
CVE-2020-12818 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed.
How severe is CVE-2020-12818?
CVE-2020-12818 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-12818?
Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Fortios, Fortinet Fortigate 1000D, Fortinet Fortigate 100E, Fortinet Fortigate 100F, Fortinet Fortigate 1100E.