CVE-2015-7361

Description

FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not require authentication for access to the ZebOS shell on the HA dedicated management interface, which allows remote attackers to obtain shell access via unspecified vectors.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.737

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2015-2323 ,CVE-2015-3626 ,CVE-2015-7361 are affected in fortios 5.2.3	NCM
Improper Authentication Vulnerability (CVE-2015-7361)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234