CVE-2015-2281: Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows...

Security readout for executives and security teams

CVE-2015-2281 is a remote code execution flaw in Fortinet Single Sign On. An attacker who can reach the FSSO Message Dispatcher on TCP port 8000 may trigger a stack overflow in collectoragent.exe on builds before 164. This is most urgent where FSSO is reachable from untrusted networks. Exposure is likely limited to environments running Fortinet Single Sign On before build 164 where collectoragent.exe listens on TCP/8000 and that port is reachable by attackers or untrusted network segments. Treat this as a high-priority legacy exposure issue. The business risk is highest if old FSSO collector agents remain reachable from broad internal networks, VPN users, or the internet. Prioritize inventory, upgrade confirmation, and network restriction. Mitigation focus: Upgrade Fortinet Single Sign On to build 164 or later.; Review Fortinet advisory FG-IR-15-006 for supported remediation guidance.; Restrict TCP/8000 access to trusted management or authentication infrastructure only..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.