Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-1414

Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify (1) settings or (2) policies, or (3) restart the device via a rebootme action to system/maintenance/shutdown.

Published

2013-07-08T17:55:02.783

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: HIGH
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

4.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-352
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System fortinet fortios ≤ 4.3.12 Yes
Operating System fortinet fortios 4.3.10 Yes
Operating System fortinet fortios 5.0 Yes
Operating System fortinet fortios 5.0.1 Yes
Hardware fortinet fortigate-1000c - Yes
Hardware fortinet fortigate-100d - Yes
Hardware fortinet fortigate-110c - Yes
Hardware fortinet fortigate-1240b - Yes
Hardware fortinet fortigate-200b - Yes
Hardware fortinet fortigate-20c - Yes
Hardware fortinet fortigate-300c - Yes
Hardware fortinet fortigate-3040b - Yes
Hardware fortinet fortigate-310b - Yes
Hardware fortinet fortigate-311b - Yes
Hardware fortinet fortigate-3140b - Yes
Hardware fortinet fortigate-3240c - Yes
Hardware fortinet fortigate-3810a - Yes
Hardware fortinet fortigate-3950b - Yes
Hardware fortinet fortigate-40c - Yes
Hardware fortinet fortigate-5001a-sw - Yes
Hardware fortinet fortigate-5001b - Yes
Hardware fortinet fortigate-5020 - Yes
Hardware fortinet fortigate-5060 - Yes
Hardware fortinet fortigate-50b - Yes
Hardware fortinet fortigate-5101c - Yes
Hardware fortinet fortigate-5140b - Yes
Hardware fortinet fortigate-600c - Yes
Hardware fortinet fortigate-60c - Yes
Hardware fortinet fortigate-620b - Yes
Hardware fortinet fortigate-800c - Yes
Hardware fortinet fortigate-80c - Yes
Hardware fortinet fortigate-voice-80c - Yes
Hardware fortinet fortigaterugged-100c - Yes
References