CVE-2017-14187

6.2 mediumEPSS 0.4%

Medium (6.2) in fortinet fortios. EPSS 0.4% chance of exploitation in the next 30 days.

A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary program to a command that is allowed to be run by the fnsysctl CLI command.

Severity

CVSS 3.0

6.2 medium

CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2018-05-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios

References

http://www.securityfocus.com/bid/104312
http://www.securitytracker.com/id/1040983
https://fortiguard.com/advisory/FG-IR-17-245
http://www.securityfocus.com/bid/104312
http://www.securitytracker.com/id/1040983

Check your stack JSON