Summary
generated automatically from NVD dataFortinet FortiOS on FortiGate firewall devices, in versions before 4.3.13 and 5.x before 5.0.2, contains multiple cross-site request forgery (CWE-352) flaws. A remote attacker could hijack an administrator's authenticated session to change settings or policies, or to restart the device through a rebootme action to system/maintenance/shutdown. The issue is rated 5.1 (MEDIUM) under CVSS v2.0, with a high attack complexity.
NVD description
Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify (1) settings or (2) policies, or (3) restart the device via a rebootme action to system/maintenance/shutdown.
EPSS · FIRST.org
2.3%probability of exploitation in the next 30 days
Higher than 82% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 8 juil. 2013
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Weaknesses (CWE)
References (2)
Similar CVEs
Other vulnerabilities of type CWE-352
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.