Summary
generated automatically from NVD dataThe IKEv1 implementations in Fortinet FortiOS (2.50, 2.80, 3.0), FortiClient 2.0 and FortiManager (2.80, 3.0) mishandle IKE packets that carry invalid values for certain IPSec attributes. A remote attacker can use such packets to terminate a process, causing a denial of service until it is automatically restarted; the issue was demonstrated with the PROTOS ISAKMP Test Suite for IKEv1. NVD notes it is unclear which of CVE-2005-3666, CVE-2005-3667 or CVE-2005-3668 this overlaps with, and rates it 7.8 (HIGH, CVSS v2.0).
NVD description
The Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.80 and 3.0, FortiClient 2.0,; and FortiManager 2.80 and 3.0 allow remote attackers to cause a denial of service (termination of a process that is automatically restarted) via IKE packets with invalid values of certain IPSec attributes, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the vendor advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
EPSS · FIRST.org
1.8%probability of exploitation in the next 30 days
Higher than 78% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-18, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 29 déc. 2005
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Weaknesses (CWE)
References (8)
- http://www.fortinet.com/FortiGuardCenter/VU226364.htmlPatchVendor Advisory
- http://www.fortinet.com/FortiGuardCenter/VU226364.htmlPatchVendor Advisory
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.