CVE-2016-8492

MEDIUM

Fortinet FortiGate - Info Disclosure

Title source: llm

Description

The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption.

References (2)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/94480

[Vendor Advisory] https://fortiguard.com/advisory/FG-IR-16-067

Scores

CVSS v3 5.9

EPSS 0.0029

EPSS Percentile 52.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-200

Status published

Affected Products (10)

fortinet/fortios < 4.3.18

fortinet/fortios

Fortinet/Fortinet FortiGate < Before 5.0

Timeline

Published Feb 08, 2017

Tracked Since Feb 18, 2026