CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-6909

Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request, aka EGREGIOUSBLUNDER.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.736

EPSS Ranking 98.7%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

Products affected by CVE-2016-6909

Fortinet » Fortios » Version: 4.1.0

cpe:2.3:o:fortinet:fortios:4.1.0
Fortinet » Fortios » Version: 4.1.1

cpe:2.3:o:fortinet:fortios:4.1.1
Fortinet » Fortios » Version: 4.1.10

cpe:2.3:o:fortinet:fortios:4.1.10
Fortinet » Fortios » Version: 4.1.2

cpe:2.3:o:fortinet:fortios:4.1.2
Fortinet » Fortios » Version: 4.1.3

cpe:2.3:o:fortinet:fortios:4.1.3
Fortinet » Fortios » Version: 4.1.4

cpe:2.3:o:fortinet:fortios:4.1.4
Fortinet » Fortios » Version: 4.1.5

cpe:2.3:o:fortinet:fortios:4.1.5
Fortinet » Fortios » Version: 4.1.6

cpe:2.3:o:fortinet:fortios:4.1.6
Fortinet » Fortios » Version: 4.1.7

cpe:2.3:o:fortinet:fortios:4.1.7
Fortinet » Fortios » Version: 4.1.8

cpe:2.3:o:fortinet:fortios:4.1.8
Fortinet » Fortios » Version: 4.1.9

cpe:2.3:o:fortinet:fortios:4.1.9
Fortinet » Fortios » Version: 4.2.0

cpe:2.3:o:fortinet:fortios:4.2.0
Fortinet » Fortios » Version: 4.2.1

cpe:2.3:o:fortinet:fortios:4.2.1
Fortinet » Fortios » Version: 4.2.10

cpe:2.3:o:fortinet:fortios:4.2.10
Fortinet » Fortios » Version: 4.2.11

cpe:2.3:o:fortinet:fortios:4.2.11
Fortinet » Fortios » Version: 4.2.12

cpe:2.3:o:fortinet:fortios:4.2.12
Fortinet » Fortios » Version: 4.2.2

cpe:2.3:o:fortinet:fortios:4.2.2
Fortinet » Fortios » Version: 4.2.3

cpe:2.3:o:fortinet:fortios:4.2.3
Fortinet » Fortios » Version: 4.2.4

cpe:2.3:o:fortinet:fortios:4.2.4
Fortinet » Fortios » Version: 4.2.5

cpe:2.3:o:fortinet:fortios:4.2.5
Fortinet » Fortios » Version: 4.2.6

cpe:2.3:o:fortinet:fortios:4.2.6
Fortinet » Fortios » Version: 4.2.7

cpe:2.3:o:fortinet:fortios:4.2.7
Fortinet » Fortios » Version: 4.2.8

cpe:2.3:o:fortinet:fortios:4.2.8
Fortinet » Fortios » Version: 4.2.9

cpe:2.3:o:fortinet:fortios:4.2.9
Fortinet » Fortios » Version: 4.3.0

cpe:2.3:o:fortinet:fortios:4.3.0
Fortinet » Fortios » Version: 4.3.1

cpe:2.3:o:fortinet:fortios:4.3.1
Fortinet » Fortios » Version: 4.3.2

cpe:2.3:o:fortinet:fortios:4.3.2
Fortinet » Fortios » Version: 4.3.3

cpe:2.3:o:fortinet:fortios:4.3.3
Fortinet » Fortios » Version: 4.3.4

cpe:2.3:o:fortinet:fortios:4.3.4
Fortinet » Fortios » Version: 4.3.5

cpe:2.3:o:fortinet:fortios:4.3.5
Fortinet » Fortios » Version: 4.3.6

cpe:2.3:o:fortinet:fortios:4.3.6
Fortinet » Fortios » Version: 4.3.7

cpe:2.3:o:fortinet:fortios:4.3.7
Fortinet » Fortios » Version: 4.3.8

cpe:2.3:o:fortinet:fortios:4.3.8
Fortinet » Fortiswitch » Version: 2.0.2

cpe:2.3:o:fortinet:fortiswitch:2.0.2
Fortinet » Fortiswitch » Version: 2.0.3

cpe:2.3:o:fortinet:fortiswitch:2.0.3
Fortinet » Fortiswitch » Version: 3.0.0

cpe:2.3:o:fortinet:fortiswitch:3.0.0
Fortinet » Fortiswitch » Version: 3.0.1

cpe:2.3:o:fortinet:fortiswitch:3.0.1
Fortinet » Fortiswitch » Version: 3.2.0

cpe:2.3:o:fortinet:fortiswitch:3.2.0
Fortinet » Fortiswitch » Version: 3.2.1

cpe:2.3:o:fortinet:fortiswitch:3.2.1
Fortinet » Fortiswitch » Version: 3.2.2

cpe:2.3:o:fortinet:fortiswitch:3.2.2
Fortinet » Fortiswitch » Version: 3.3.1

cpe:2.3:o:fortinet:fortiswitch:3.3.1
Fortinet » Fortiswitch » Version: 3.3.2

cpe:2.3:o:fortinet:fortiswitch:3.3.2
Fortinet » Fortiswitch » Version: 3.3.3

cpe:2.3:o:fortinet:fortiswitch:3.3.3
Fortinet » Fortiswitch » Version: 3.4.0

cpe:2.3:o:fortinet:fortiswitch:3.4.0
Fortinet » Fortiswitch » Version: 3.4.1

cpe:2.3:o:fortinet:fortiswitch:3.4.1
Fortinet » Fortiswitch » Version: 3.4.2

cpe:2.3:o:fortinet:fortiswitch:3.4.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-6909

Products

Pricing

Contact Us