VULNERABILITY INTELLIGENCE

CVE-2015-1570

CVSS score4.3 MEDIUM
EPSS probability0.51%
CISA KEVNot currently listed
Published2015-02-10
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate.

Primary references