CVEvulnerability
CVE-2016-6909
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-08-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request, aka EGREGIOUSBLUNDER.
Affected configurations
• fortinet fortios (>= 4.1.0 < 4.1.11)
• fortinet fortios (>= 4.2.0 < 4.2.13)
• fortinet fortios (>= 4.3.0 < 4.3.9)
• fortinet fortiswitch (<= 3.4.2)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://fortiguard.com/advisory/FG-IR-16-023 Vendor Advisory
- http://packetstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/92523 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036643 Third Party Advisory, VDB Entry
- https://musalbas.com/2016/08/16/equation-group-firewall-operations-catalogue.html Third Party Advisory
- https://www.exploit-db.com/exploits/40276/ Exploit, Third Party Advisory, VDB Entry
- http://fortiguard.com/advisory/FG-IR-16-023 Vendor Advisory
- http://packetstormsecurity.com/files/138387/EGREGIOUSBLUNDER-Fortigate-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/92523 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036643 Third Party Advisory, VDB Entry
- https://musalbas.com/2016/08/16/equation-group-firewall-operations-catalogue.html Third Party Advisory
- https://www.exploit-db.com/exploits/40276/ Exploit, Third Party Advisory, VDB Entry