UpHeron
All vulnerabilities

Servers and applications

CVE-2017-3130

An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.

Severity
High 7.5
Published
10 Aug 2017
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.4% in the next 30 daysHigher than 73% of CVEs. EPSS by FIRST, 11 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiOSServers and applications · cpe:o:fortinet:fortios
  • Version 5.6.0
  • Version 5.4.4
  • Version 5.4.3
  • Version 5.4.2
All 32 release lines
  • Version 5.0.0
  • Version 5.0.1
  • Version 5.0.2
  • Version 5.0.3
  • Version 5.0.4
  • Version 5.0.5
  • Version 5.0.6
  • Version 5.0.7
  • Version 5.0.8
  • Version 5.0.9
  • Version 5.0.10
  • Version 5.0.11
  • Version 5.0.12
  • Version 5.0.13
  • Version 5.0.14
  • Version 5.2.0
  • Version 5.2.1
  • Version 5.2.2
  • Version 5.2.3
  • Version 5.2.4
  • Version 5.2.5
  • Version 5.2.6
  • Version 5.2.7
  • Version 5.2.8
  • Version 5.2.9
  • Version 5.2.10
  • Version 5.4.0
  • Version 5.4.1
  • Version 5.4.2
  • Version 5.4.3
  • Version 5.4.4
  • Version 5.6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-3130
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-3130