CVE-2017-17544

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-04-09 · updated 2026-06-17
Weakness: CWE-269

Description

A privilege escalation vulnerability in Fortinet FortiOS 6.0.0 to 6.0.6, 5.6.0 to 5.6.10, 5.4 and below allows admin users to elevate their profile to super_admin via restoring modified configurations.

Affected products

Fortinet FortiOS (FortiGate): through 5.4.0; from 5.6.0 through 5.6.10; from 6.0.0 through 6.0.6

References

http://www.securityfocus.com/bid/107839
https://fortiguard.com/advisory/FG-IR-17-053
http://www.securityfocus.com/bid/107839
https://fortiguard.com/advisory/FG-IR-17-053

Get alerted when CVE-2017-17544 or the next vulnerability affects your stack