HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2018-13379: Fortinet FortiOS SSL VPN path traversal

HoneyLabs honeypots recorded 12 probes matching CVE-2018-13379 from 12 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

  • /remote/fgt_lang
  • /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

Addresses probing it

Source IPProbesNetworkCountry
45.56.72.1421Akamai Connected CloudUnited States
138.197.221.541DigitalOcean, LLCUnited States
192.241.136.1621DigitalOcean, LLCUnited States
185.3.95.771Akamai Connected CloudUnited Kingdom
137.184.76.521DigitalOcean, LLCUnited States
143.244.148.1321DigitalOcean, LLCUnited States
2.27.248.2091Dedik Services LimitedGermany
104.200.20.2441Akamai Connected CloudUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC77
AS63949Akamai Connected Cloud44
AS207043Dedik Services Limited11

Captured requests

  • /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

HTTP client fingerprints (JA4H)

  • ge11nn07en_2100cb06eef5
  • ge11nn0300_dedeb29cc523

CVE report

CVE report

Open a specific CVE from the CVE tracker.