CVE-2020-29014 MEDIUM

CVE-2020-29014

Vendor Fortinet
Product Fortinet FortiSandbox
Published July 9, 2021
Last update October 25, 2024

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:X

What the vulnerability does

01Description

A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of FortiSandbox before 3.2.2 may allow an authenticated attacker to bring the system into an unresponsive state via specifically orchestrated sequences of commands.

Key dates

02Disclosure timeline

July 9, 2021 CVE published
October 25, 2024 Record updated