fortinet fortios 4.3.13 vulnerabilities and exploits

(subscribe to this query)

The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows malicious users to gain unauthorized read access to data handled by the device via IPSec/TLS decryption.

Fortinet Fortios 4.3.0 Fortinet Fortios 4.3.10 Fortinet Fortios 4.3.13 Fortinet Fortios 4.3.17 Fortinet Fortios 4.3.16 Fortinet Fortios 4.3.15 Fortinet Fortios Fortinet Fortios 4.3.12 Fortinet Fortios 4.3.14

The FortiManager protocol service in Fortinet FortiOS prior to 4.3.16 and 5.x prior to 5.0.8 on FortiGate devices does not prevent use of anonymous ciphersuites, which makes it easier for man-in-the-middle malicious users to obtain sensitive information or interfere with communic...

Fortinet Fortios 5.0.7 Fortinet Fortios 5.0.6 Fortinet Fortios 5.0.5 Fortinet Fortios 4.3.12 Fortinet Fortios 4.3.10 Fortinet Fortios 4.3.14 Fortinet Fortios 4.3.13 Fortinet Fortios 5.0.0 Fortinet Fortios Fortinet Fortios 5.0.4 Fortinet Fortios 5.0.3

The FortiManager protocol service in Fortinet FortiOS prior to 4.3.16 and 5.0.0 prior to 5.0.8 on FortiGate devices allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a crafted request.

Fortinet Fortios 5.0.4 Fortinet Fortios 5.0.5 Fortinet Fortios 4.3.10 Fortinet Fortios 5.0.0 Fortinet Fortios 5.0.3 Fortinet Fortios 4.3.13 Fortinet Fortios 4.3.12 Fortinet Fortios Fortinet Fortios 4.3.14 Fortinet Fortios 5.0.6 Fortinet Fortios 5.0.7

The SSL-VPN feature in Fortinet FortiOS prior to 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote malicious users to spoof encrypted content via a crafted MAC field.

Fortinet Fortios

Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices prior to 4.3.13 and 5.x prior to 5.0.2 allow remote malicious users to hijack the authentication of administrators for requests that modify (1) settings or (2) policies, o...

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook