VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 15, 2015· Updated Jun 17, 2026

CVE-2015-7361

CVE-2015-7361

Description

FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not require authentication for access to the ZebOS shell on the HA dedicated management interface, which allows remote attackers to obtain shell access via unspecified vectors.

Affected products

2
  • Fortinet/Fortios2 versions
    cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*
    • (no CPE)range: =5.2.3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.