Summary
generated automatically from NVD dataFortinet FortiOS 5.0 Patch 7 build 4457 has a flaw in its CAPWAP DTLS implementation, which reportedly reuses the same certificate and private key (Fortinet_Factory) across different customers' installations. This could let a man-in-the-middle attacker spoof SSL servers. The vendor advisory FG-IR-15-002 disputes this, stating the certificate is unique to each device, so a MitM attack cannot be staged. The CVSS v2.0 score is 4.3 (MEDIUM).
NVD description
The CAPWAP DTLS protocol implementation in Fortinet FortiOS 5.0 Patch 7 build 4457 uses the same certificate and private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the Fortinet_Factory certificate and private key. NOTE: FG-IR-15-002 says "The Fortinet_Factory certificate is unique to each device ... An attacker cannot therefore stage a MitM attack.
EPSS · FIRST.org
0.86%probability of exploitation in the next 30 days
Higher than 57% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 10 févr. 2015
- Updated
- 17 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Weaknesses (CWE)
References (6)
- http://www.fortiguard.com/advisory/FG-IR-15-002/Vendor Advisory
- http://www.fortiguard.com/advisory/FG-IR-15-002/Vendor Advisory
Similar CVEs
Other vulnerabilities of type CWE-310
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.