description: A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via crafted TCP packets.
problem types: Improper access control
affected:
{
vendor: Fortinet
product: IPS Engine
defaultStatus: unaffected
versions:
version: 7.321, status: affected
version: 7.166, status: affected
version: 6.158, status: affected
}
metrics:
format: CVSS
cvssV3_1: [
version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:F/RL:O/RC:R
]
solutions: IPS Engine manual download is not needed unless device is offline and cannot download IPS Engine update automatically.
Fixed in IPS Engine version 6.0159 and later.
FortiOS 6.4.13 and later contains IPS engine 6.0160 as the default IPS Engine.
IPS Engine 6.0162 is downloadable from FortiGuard by FortiGate units with a valid subscription running FortiOS 6.4.x.
Fixed in IPS Engine version 7.0166 and later.
FortiOS 7.0.12 and later contains IPS engine 7.0167 as the default IPS Engine.
Fixed in IPS Engine version 7.0313 and later.
FortiOS 7.2.5 and later contains IPS engine 7.0314 as the default IPS Engine.
IPS Engine 7.0322 is downloadable from FortiGuard by FortiGate units with a valid subscription running FortiOS 7.2.x.
FortiOS 7.4.0 and later contains IPS engine 7.0493 as the default IPS Engine.