What is CVE-2019-15705?

CVE-2019-15705 is a high-severity vulnerability in Fortinet Fortigate, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2019-11-27.

How severe is CVE-2019-15705?

High severity. CVSS v3 base score is 7.5 out of 10.

Improper input validation in Fortinet Fortigate

CVE-2019-15705

An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and below may allow an unauthenticated remote attacker to crash the SSL VPN service by sending a crafted POST request.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.018 (76.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Fortinet Fortigate — versions FortiOS versions 6.2.1 and below, FortiOS versions 6.0.6 and below
Fortinet Fortios

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@fortinet.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-15705?: CVE-2019-15705 is a high-severity vulnerability in Fortinet Fortigate, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2019-11-27.
How severe is CVE-2019-15705?: High severity. CVSS v3 base score is 7.5 out of 10.