VULNERABILITY INTELLIGENCE

CVE-2013-1414

CVSS score5.1 MEDIUM
EPSS probability2.29%
CISA KEVNot currently listed
Published2013-07-08
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify (1) settings or (2) policies, or (3) restart the device via a rebootme action to system/maintenance/shutdown.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references