CVE-2018-1352

CVE-2018-1352

A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable.

Attack vector: 
Network

Product: 
fortinet: fortios

References: 
https://fortiguard.com/advisory/FG-IR-18-018

Severity: 
High

CVSS Score: 
7.5

CVSS Vector: 
(AV:N/AC:L/Au:N/C:P/I:P/A:P)