CVE-2018-1352

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-134

Affected software

No affected versions have been published.

Timeline

Published
Feb 8, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-135207.5The mintToken function of a smart contract implementation for TopscoinAdvanced, an Ethereum token, has an integer overflow that allows the oCVE-2018-135217.5The mintToken function of a smart contract implementation for PinkyToken, an Ethereum token, has an integer overflow that allows the owner oCVE-2018-135227.5The mintToken function of a smart contract implementation for EXGROUP, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-135237.5The mintToken function of a smart contract implementation for SmartPayment, an Ethereum token, has an integer overflow that allows the ownerCVE-2018-135247.5The mintToken function of a smart contract implementation for PornCoin (PRNC), an Ethereum token, has an integer overflow that allows the owCVE-2018-135257.5The mintToken function of a smart contract implementation for Flow, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-135267.5The mintToken function of a smart contract implementation for WangWangToken, an Ethereum token, has an integer overflow that allows the owneCVE-2018-135277.5The mintToken function of a smart contract implementation for ElevateCoin, an Ethereum token, has an integer overflow that allows the owner CVE-2018-135287.5The mintToken function of a smart contract implementation for DhaCoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-135297.5The mintToken function of a smart contract implementation for BetterThanAdrien, an Ethereum token, has an integer overflow that allows the oCVE-2018-13534.3An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read tCVE-2018-135307.5The mintToken function of a smart contract implementation for HunterCoin, an Ethereum token, has an integer overflow that allows the owner o
CVE-2018-1352: Critical severity, CVSS 9.8 | Vulnix