Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Fortinet AV Engine Fails to Detect Malicious RAR Archives

CVE-2020-9295 · published 1 year ago
Summary

Certain FortiGate and FortiClient versions may not detect malicious files hidden in RAR archives. This could allow malware to spread if users open the archives. Update to the latest AV engine version to ensure detection of these types of threats.

What to do
  • Update fortinet antivirus_engine to version 6.00145 or later.
Affected software
VendorProductAffected versions
fortinet antivirus_engine < 6.00145
cpe:2.3:a:fortinet:antivirus_engine:*:*:*:*:*:*:*:*
Original advisory text
FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below may not immediately ...
FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below may not immediately detect certain types of malformed or non-standard RAR archives, potentially containing malicious files. Based on the samples provided, FortiClient will detect the malicious files upon trying extraction by real-time scanning and FortiGate will detect the malicious archive if Virus Outbreak Prevention is enabled.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-358Improperly Implemented Security Check for Standard
Timeline
Published17 Mar 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2020-9295 · NVD
Track software like this
Free during beta