Fortinet Fortigate 300C vulnerabilities

2 vulnerabilities

Known vulnerabilities in Fortinet Fortigate 300C, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.1CVE-2013-1414fortinetfortigate-1000c+29
EPSS score
2.29%
Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify (1) settings or (2) policies, or (3) restart the device via a rebootme action to system/maintenance/shutdown.5.3CVE-2012-4948fortinetfortigate-1000c+28
EPSS score
0.33%
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.