Fortinet FortiOS/FortiPAM/FortiProxy vulnerabilities

A NULL Pointer Dereference vulnerability (CWE-476) in Fortinet FortiOS, FortiPAM and FortiProxy. An authenticated attacker can send crafted HTTP requests to crash the httpsd daemon.

An improper privilege management vulnerability (CWE-269) exists in Fortinet FortiOS, FortiPAM, and FortiProxy. An authenticated administrator may bypass the trusted host policy via a crafted CLI command.

Fortinet FortiOS, FortiPAM, and FortiProxy in the listed versions contain a use of externally-controlled format string vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted commands. The vulnerability affects multiple versions of FortiOS (7.4.0, 7.2.0-7.2.5, 7.0, 6.4, 6.2, 6.0.0-6.0.16), FortiPAM (1.1.0, 1.0), and FortiProxy (7.2.0-7.2.5, 7.0.0-7.0.11, 2.0, 1.2, 1.1, and others).

A use of externally-controlled format string vulnerability in Fortinet FortiOS, FortiPAM, and FortiProxy allows an attacker to execute unauthorized code or commands via a specially crafted command.