5.1

CVE-2013-1414

Exploit

Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify (1) settings or (2) policies, or (3) restart the device via a rebootme action to system/maintenance/shutdown.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fortinet ≫ Fortios Version <= 4.3.12
Fortinet ≫ Fortios Version4.3.10
Fortinet ≫ Fortios Version5.0
Fortinet ≫ Fortios Version5.0.1
Fortinet ≫ Fortigate-1000c Version-
Fortinet ≫ Fortigate-100d Version-
Fortinet ≫ Fortigate-110c Version-
Fortinet ≫ Fortigate-1240b Version-
Fortinet ≫ Fortigate-200b Version-
Fortinet ≫ Fortigate-20c Version-
Fortinet ≫ Fortigate-300c Version-
Fortinet ≫ Fortigate-3040b Version-
Fortinet ≫ Fortigate-310b Version-
Fortinet ≫ Fortigate-311b Version-
Fortinet ≫ Fortigate-3140b Version-
Fortinet ≫ Fortigate-3240c Version-
Fortinet ≫ Fortigate-3810a Version-
Fortinet ≫ Fortigate-3950b Version-
Fortinet ≫ Fortigate-40c Version-
Fortinet ≫ Fortigate-5001b Version-
Fortinet ≫ Fortigate-5020 Version-
Fortinet ≫ Fortigate-5060 Version-
Fortinet ≫ Fortigate-50b Version-
Fortinet ≫ Fortigate-5101c Version-
Fortinet ≫ Fortigate-5140b Version-
Fortinet ≫ Fortigate-600c Version-
Fortinet ≫ Fortigate-60c Version-
Fortinet ≫ Fortigate-620b Version-
Fortinet ≫ Fortigate-800c Version-
Fortinet ≫ Fortigate-80c Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.588
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.