CVE-2014-2723
moderate-risk
Published 2020-03-19
In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect.
Do I need to act?
~
1.1% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10
High
NETWORK
/ LOW complexity
Affected Products (4)
Fortibalancer 400 Firmware
Fortibalancer 1000 Firmware
Fortibalancer 2000 Firmware
Fortibalancer 3000 Firmware
Affected Vendors
References (2)
Mitigation
https://fortiguard.com/advisory/FG-IR-14-010
Mitigation
https://fortiguard.com/advisory/FG-IR-14-010
43
/ 100
moderate-risk
Severity
30/34 · Critical
Exploitability
3/34 · Minimal
Exposure
10/34 · Low