Vulnerability threat dossier
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.
VTP analyst assessment
CVE-2018-13379 lets an unauthenticated attacker use crafted SSL VPN portal requests to download restricted system files. CISA KEV lists known exploitation and known ransomware campaign use.
0 record references and 0 source references passed trusted post-response validation. The current deterministic record contains 0 independent evidence groups.
Recent Fortinet reporting in this bundle does not identify CVE-2018-13379.
First-party honeypot request semantics are potentially consistent with this CVE. This is an unconfirmed candidate match, not proof of exploitation or successful execution.
If you use affected FortiOS or FortiProxy SSL VPN versions, upgrade to a fixed release and rotate exposed credentials.
First-party deterministic correlation
The request shares exploitation-associated characteristics with CVE-2018-13379, but the evidence does not identify one CVE with sufficient confidence.
Basis: deterministic technical candidate
VTP deterministic assessment
CISA KEV lists this vulnerability as known to be exploited globally.
EPSS is 1.00; this is predictive context, not exploitation evidence.
Exploitation attempts against this CVE were confirmed by first-party telemetry.
First-party honeypot request semantics are potentially consistent with this CVE. This is an unconfirmed candidate match, not proof of exploitation or successful execution.
Material change ledger
Claim provenance
0 primary sources · 0 dependent secondary reports · 2 reports with unresolved independence. Repetition remains visible without multiplying confirmation.
Event history
The Hacker News supplied a deterministically extracted signal; review the linked evidence before escalation.
CISA lists global known exploitation. This is not a VTP sensor observation.
Original publications
The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege escalation tools. The post Thai Broadband Provider Hacked via Fortinet Vulnerability appeared first on SecurityWeek .
The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter operated by Chinese threat actors to target critical infrastructure and other sensitive networks in the country. The activity has been attributed to a Chinese state-sponsored group known as QTFY, employed by Nanjing Xinjiuwei Network Technology Company (南京鑫玖维网络科技有限公司).&
Technical vulnerability data
Raw observations
First-party honeypot request semantics are potentially consistent with this CVE. This is an unconfirmed candidate match, not proof of exploitation or successful execution.