What’s Vulnerable › Vulnerabilities

CVE-2014-2722

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-03-19 · updated 2026-06-17
• Weakness: CWE-276

Description

In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect.

Affected products

• Fortinet Fortibalancer 1000 Firmware: all versions
• Fortinet Fortibalancer 2000 Firmware: all versions
• Fortinet Fortibalancer 3000 Firmware: all versions
• Fortinet Fortibalancer 400 Firmware: all versions

References

• https://fortiguard.com/advisory/FG-IR-14-010
• https://fortiguard.com/advisory/FG-IR-14-010

Get alerted when CVE-2014-2722 or the next vulnerability affects your stack