CVE-2017-3127

Name of the Vulnerable Software and Affected Versions Fortinet FortiGate versions 5.2.0 through 5.2.10

Description The issue allows an attacker to execute unauthorized code or commands via the srcintf parameter during Firewall Policy Creation. This can be exploited to load and run remote malicious Javascript in a logged-in browser.

Recommendations For Fortinet FortiGate versions 5.2.0 through 5.2.10, consider disabling the Firewall Policy Creation feature until a patch is available, or restrict access to the srcintf parameter to minimize the risk of exploitation.