CVE-2020-9290
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
An untrusted search path vulnerability in Fortinet may allow an attacker to execute unauthorized code or commands via network exploitable. Technical details were not provided in the description.
Risk Assessment
A network-based attacker may potentially execute arbitrary code or commands on the system, leading to full compromise of the device.
Recommendation
Apply available security updates from Fortinet for the affected product. Restrict network access to Fortinet devices to trusted networks.
Other vulnerabilities in Fortinet
See all- CVE-2023-27997CriticalActively exploited
Heap-based buffer overflow in SSL-VPN in FortiOS and FortiProxy, allowing a remote attacker to execute arbitrary code or commands via specially crafted requests.
- CVE-2020-9287High
An untrusted search path vulnerability in Fortinet may allow an attacker to execute unauthorized code or commands via network exploitable. Technical details were not provided in the description.
- CVE-2019-5589High
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
Original NVD description (English source)
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
Vulnerability data from NVD (NIST) · CISA KEV · EPSS