FORTINET Security Advisory
Published Date: Not specified
Advisory Summary
📌 🔔 Persistent Denial of Service in Admin Profile (FortiSandbox)
FortiSandbox has a reported Uncaught Exception (CWE-248) issue that could let a privileged attacker trigger a persistent DoS, resulting in loss of access to both the GUI and CLI through crafted HTTP requests.
- Persistent disruption of administrative access
- GUI and CLI unavailability until service is remediated/recovered
- Potential operational downtime for security analysis workflows
- CVSSv3: 4.8 (moderate severity), but the persistence and admin interface impact make it operationally meaningful—especially in environments where FortiSandbox is critical to incident response or malware analysis pipelines.
- Ensure only trusted networks/users can reach management ports
- Use strong authentication and limit admin privileges where possible
- CWE-248: Uncaught Exception
- Persistent DoS via crafted HTTP requests
Reference: Vendor Advisory