Skip to content
Fencer Vulns
medium 4.3

CVE-2018-13374 kev+ ransomware in the critical feed json

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to ob…

published 2019-01-22 7 y ago modified 2026-10-01 38 d ago also EUVD-2018-5318

cvss
4.3
version 3.1, CNA
cisa kev
Exploited
added 2022-09-08, used in ransomware
epss
38.1%
EPSS 38.1% chance of exploitation in 30 days, percentile 98%
public exploits
1
Exploit-DB

Summary

A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.

Patch / fix

cisa required action Apply updates per vendor instructions.

  • fortinet fortiadc 5.4.5, 6.0.2
  • fortinet fortios 6.0.3

Timeline

  1. First public exploit (EDB-46171)
  2. Published
  3. Added to CISA KEV
  4. CISA patch deadline
  5. CISA SSVC: exploitation active

Known exploited

Added
4 y ago
Patch by
2022-09-29 (4 y ago)
Ransomware
Known to be used in ransomware campaigns
Required action
Apply updates per vendor instructions.
Vendor, product
Fortinet, FortiOS and FortiADC
CISA name
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

Ransomware

Groups reported to have exploited it in intrusions.

  • Conti ransomware gang

reported by tenable.com

Ransomware Vulnerability Matrix by BushidoUK (github.com/BushidoUK/Ransomware-Vulnerability-Matrix), reformatted per CVE. CC BY 4.0

CISA SSVC

Exploitation
Active, exploited in the wild
Automatable
no
Technical impact
total
Assessed
2 mo ago

Exploit prediction

38.09% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-46171 Fortinet FortiGate FortiOS < 6.0.3 - LDAP Credential Disclosure webapps, 2019-01-16

CVSS scores

assigned by version score vector
CNA 3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NVD 3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NVD 2.0 4.0 AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected products

  • Fortinet Fortinet FortiOS, fortiADC

Classification

Weakness
  • CWE-732 Incorrect Permission Assignment for Critical Resource
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.