← All advisories

Critical severity9.8NVD Advisory· Published Feb 8, 2019· Updated Jun 17, 2026

CVE-2018-1352

CVE-2018-1352

Description

A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable.

Affected products

2

Fortinet/Fortios2 versions
cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*
- (no CPE)range: 5.6.0

Patches

Vulnerability mechanics

References

1

fortiguard.com/advisory/FG-IR-18-018nvdVendor Advisory

News mentions

0

No linked articles in our index yet.