Detections
Analytics

Fortinet FortiOS < 6.4 MitM (FG-IR-18-292)

medium Nessus Plugin ID 162313

Language:

Version 1.6

Nov 8, 2023, 3:41 PM

  • CVSSv3 severity (based on None, severity decreased from "High" to "Medium")
  • CVSSv2 severity (based on CVE-2022-22305, severity decreased from "Medium" to "Low")
  • CVSS metrics ("CVSSv2 score" set to 3.2. "CVSSv3 score" set to 4.2. "CVSSv2 vector" set to "CVSS2#AV:A/AC:H/Au:N/C:P/I:P/A:N". "CVSSv3 vector" set to "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N")

Plugin Feed: 202311081541

Version 1.5

Oct 20, 2023, 5:46 PM

  • CVSS metrics ("CVSSv2 score" changed from 2.9 to 5.8. "CVSSv2 vector" changed from "CVSS2#AV:A/AC:M/Au:N/C:P/I:N/A:N" to "CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N". "CVSSv3 vector" changed from "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N". "CVSSv3 score" changed from 5.3 to 7.4)
  • CVSSv2 severity (based on CVE-2022-22305, severity increased from "Low" to "Medium")
  • CVSSv3 score source (set to "CVE-2022-22305")
  • CVSSv3 severity (based on CVE-2022-22305, severity increased from "Medium" to "High")
  • Exploit attributes ("Exploit available" set to "False")

Plugin Feed: 202310201746

Version 1.4

May 3, 2023, 7:12 PM

  • Detection (Added verify product / model check as it was not included in older era plugin.)

Plugin Feed: 202305031912

Version 1.4

Oct 20, 2023, 3:51 PM

  • CVSS metrics ("CVSSv2 score" changed from 2.9 to 5.8)
  • CVSS metrics ("CVSSv2 vector" changed from "CVSS2#AV:A/AC:M/Au:N/C:P/I:N/A:N" to "CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N")
  • CVSS metrics ("CVSSv3 score" changed from 5.3 to 7.4)
  • CVSS metrics ("CVSSv3 vector" changed from "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N")
  • CVSSv2 severity (based on CVE-2022-22305, severity increased from "Low" to "Medium")
  • CVSSv3 score source (set to "CVE-2022-22305")
  • CVSSv3 severity (based on CVE-2022-22305, severity increased from "Medium" to "High")
  • Exploit attributes ("Exploit available" set to "False")

Plugin Feed: 202310201551

* Changelogs are generally available for changes made after Nov 1, 2022