{"schemaVersion":3,"id":"CVE-2018-9195","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Use of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow a Man in the middle with knowledge of the key to eavesdrop on and modify information (URL/SPAM services in FortiOS 5.6, and URL/SPAM/AV services in FortiOS 6.0.; URL rating in FortiClient) sent and received from Fortiguard severs by decrypting these messages. Affected products include FortiClient for Windows 6.0.6 and below, FortiOS 6.0.7 and below, FortiClient for Mac OS 6.2.1 and below.","dates":{"published":"2019-11-21T14:59:52.000Z","modified":"2024-10-25T14:05:09.966Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.9,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01581,"percentile":0.75165,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":-0.22900000000000004,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.0181},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0181,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0181,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0181,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0181,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0181,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0181,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0181,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0181,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01581,"percentile":0.75165}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.0181,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0181,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0181,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01581,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01581,"percentile":0.75165}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-798","name":"Use of Hard-coded Credentials","description":"The product contains hard-coded credentials, such as a password or cryptographic key.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/798.html"}],"affected":[{"vendor":"fortinet","product":"forticlient","name":"forticlient","label":"forticlient","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 6.0.6","noFixRecorded":false,"fixedIn":null},{"text":"≤ 6.2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 6.0.6 | ≤ 6.2.1","eol":null,"hubHref":"/vendor/fortinet/forticlient"},{"vendor":"fortinet","product":"forticlient for mac os","name":"FortiClient for Mac OS","label":"forticlient for mac os","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"FortiClient for Mac OS 6.2.1 and below","noFixRecorded":false,"fixedIn":null}],"versionsText":"FortiClient for Mac OS 6.2.1 and below","eol":null,"hubHref":"/vendor/fortinet/forticlient_for_mac_os"},{"vendor":"fortinet","product":"forticlient for windows","name":"FortiClient for Windows","label":"forticlient for windows","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"FortiClient for Windows 6.0.6 and below","noFixRecorded":false,"fixedIn":null}],"versionsText":"FortiClient for Windows 6.0.6 and below","eol":null,"hubHref":"/vendor/fortinet/forticlient_for_windows"},{"vendor":"fortinet","product":"fortios","name":"fortios","label":"fortios","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"FortiOS 6.0.7 and below","noFixRecorded":false,"fixedIn":null},{"text":"≤ 6.0.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"FortiOS 6.0.7 and below | ≤ 6.0.6","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"fortios","label":"FortiOS","category":"os"}},"hubHref":"/vendor/fortinet/fortios"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-100","label":"fortiguard.com/advisory/FG-IR-18-100","hostname":"fortiguard.com","tags":["X Refsource CONFIRM","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-11-21T14:59:52.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-10-25T14:05:09.966Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":24,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:23:11.965Z","stale":false,"partial":false}}