CVE-2017-3130
Vulnerability from cvelistv5
Published
2017-08-10 21:00
Modified
2024-10-25 14:33
Severity ?
Summary
An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.
References
psirt@fortinet.comhttp://www.securityfocus.com/bid/100211Third Party Advisory, VDB Entry
psirt@fortinet.comhttps://fortiguard.com/advisory/FG-IR-17-073Vendor Advisory
Impacted products
Fortinet, Inc.Fortinet FortiOS
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:16:28.177Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://fortiguard.com/advisory/FG-IR-17-073"
          },
          {
            "name": "100211",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100211"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-3130",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-24T20:10:03.405299Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-25T14:33:41.905Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Fortinet FortiOS",
          "vendor": "Fortinet, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "FortiOS 5.6.0, 5.4.4 and below versions"
            }
          ]
        }
      ],
      "datePublic": "2017-08-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-11T09:57:01",
        "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
        "shortName": "fortinet"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://fortiguard.com/advisory/FG-IR-17-073"
        },
        {
          "name": "100211",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100211"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@fortinet.com",
          "DATE_PUBLIC": "2017-08-08T00:00:00",
          "ID": "CVE-2017-3130",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Fortinet FortiOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "FortiOS 5.6.0, 5.4.4 and below versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Fortinet, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://fortiguard.com/advisory/FG-IR-17-073",
              "refsource": "CONFIRM",
              "url": "https://fortiguard.com/advisory/FG-IR-17-073"
            },
            {
              "name": "100211",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100211"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
    "assignerShortName": "fortinet",
    "cveId": "CVE-2017-3130",
    "datePublished": "2017-08-10T21:00:00Z",
    "dateReserved": "2016-12-02T00:00:00",
    "dateUpdated": "2024-10-25T14:33:41.905Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-3130\",\"sourceIdentifier\":\"psirt@fortinet.com\",\"published\":\"2017-08-10T21:29:00.187\",\"lastModified\":\"2017-08-21T14:49:21.070\",\"vulnStatus\":\"Analyzed\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n en Fortinet FortiOS 5.6.0, 5.4.4 y versiones inferiores permite que un atacante obtenga la informaci\u00f3n de la versi\u00f3n de FortiOS mediante la inspecci\u00f3n de paquetes FortiOS IKE VendorID.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:N/A:N\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.0},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E542BE2-14FC-4BA8-890C-7DA81F33F032\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D8A5EC4-CE2C-4174-9F09-361B8D153AD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3BABC91-F9BF-4B52-BDBF-F9617ABCAC9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C172379-F6BA-4343-831A-62004E742C6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"516597D9-086E-4668-A40B-473F38125F92\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D62F480B-D8CA-4F5C-8034-C0AE73F26B67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F435F408-EC5B-42A0-9E3C-4DE5D702ACAE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"823C8357-E638-4EAE-B231-3B60263FFE52\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C6615C7-C6F8-4E42-BA09-5A29A0B68E09\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B24C5917-BBC0-4924-9FB0-49E141DC9D54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"513A1CAA-9B87-4CF5-9513-396E2E686CDF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62CD94B3-C430-4672-BBEA-B8A542944F66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91AA2061-5D28-4DCF-9126-8D5CE57D96F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A1FA9832-A573-489B-A26E-7A7DFC1E0D6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2FC836E7-DAA2-4FDB-9919-D5FF35E67C4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E627C59-7C16-44F0-800D-A2E8A766B26D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"233236FA-BB13-4261-BE2E-3E617406DC53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27844CC9-498B-4A65-91AC-AC130222EE5F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27B4C672-7ED5-4113-87AE-5774D1263C0B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CBEA3AA-AE46-4A55-91EE-9ADC187BF614\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05CB7A90-91BC-49AF-9B5C-EBD212484C64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"864D3221-177B-43CE-BD7D-CB14A110268E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31C186D6-6AC5-49EB-A701-C91358B4A25F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAC9F6C4-F887-4F25-87BD-383F6CF39806\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8558962-7A19-4F4A-BED0-9CB5D4CFC422\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC63D521-EC88-4B13-BC73-3284F3FCF3A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1668AE14-D9A4-4B7D-BC3F-75885792875A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E0F3B9B-A06F-4A96-B2E7-9DC56E629182\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"377A2F0B-2A58-4C2C-B546-3178B353484B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"20EBDFD4-45A0-47CC-817E-48E84F945402\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A3BE3F8-9157-461C-8E3A-ABFA728B7DB2\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/100211\",\"source\":\"psirt@fortinet.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://fortiguard.com/advisory/FG-IR-17-073\",\"source\":\"psirt@fortinet.com\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.