CVE-2018-13366

—

CVSS 3.0

5.3 medium

EPSS

<1%p57

Published

Apr 9, 2019 (Apr 9, 2019)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows attacker to reveals serial number of FortiGate via hostname field defined in connection control setup packets of PPTP protocol.

Vendors: fortinet
Products: fortios
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.