CVE-2015-7361 | BDVDB-2026-72235 Detail

Description#

FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not require authentication for access to the ZebOS shell on the HA dedicated management interface, which allows remote attackers to obtain shell access via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1033093
http://www.fortiguard.com/advisory/zebos-routing-remote-shell-service-enabled
http://fortiguard.com/advisory/zebos-routing-remote-shell-service-enabled

Exploit#

No public exploit known

History#

Version 12015-10-15Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.