UpHeron
All vulnerabilities

Servers and applications

CVE-2017-14187

A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary program to a command that is allowed to be run by the fnsysctl CLI command.

Severity
Medium 6.2
Published
24 May 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.4% in the next 30 daysHigher than 38% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiOSServers and applications · cpe:o:fortinet:fortios
  • Every version up to 5.2.0
  • From 5.4.0 up to 5.4.8
  • From 5.6.0 up to 5.6.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-14187
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-14187