CVE-2016-8492

Опубликовано: 08 фев. 2017

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption.

Ссылки

http://www.securityfocus.com/bid/94480
Third Party Advisory
VDB Entry
https://fortiguard.com/advisory/FG-IR-16-067
Vendor Advisory
http://www.securityfocus.com/bid/94480
Third Party Advisory
VDB Entry
https://fortiguard.com/advisory/FG-IR-16-067
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

Версия до 4.3.18 (включая)

cpe:2.3:o:fortinet:fortios:4.3.0:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:4.3.10:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:4.3.12:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:4.3.13:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:4.3.14:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:4.3.15:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:4.3.16:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:4.3.17:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00379

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-m77f-rqj8-qpp9