Strix
26.1K

CVE-2012-4948

UnknownEPSS 0.34%

Last modified

CVE-2012-4948 is a vulnerability of currently unknown severity. The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.

Description

The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.

Metrics

EPSS Probability
0.34%

25.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
FortinetFortigate-1000cAll versions
FortinetFortigate-100dAll versions
FortinetFortigate-110cAll versions
FortinetFortigate-1240bAll versions
FortinetFortigate-200bAll versions
FortinetFortigate-20cAll versions
FortinetFortigate-300cAll versions
FortinetFortigate-3040bAll versions
FortinetFortigate-310bAll versions
FortinetFortigate-311bAll versions
FortinetFortigate-3140bAll versions
FortinetFortigate-3240cAll versions
FortinetFortigate-3810aAll versions
FortinetFortigate-3950bAll versions
FortinetFortigate-40cAll versions
FortinetFortigate-5001a-SwAll versions
FortinetFortigate-5001bAll versions
FortinetFortigate-5020All versions
FortinetFortigate-5060All versions
FortinetFortigate-50bAll versions
FortinetFortigate-5101cAll versions
FortinetFortigate-5140bAll versions
FortinetFortigate-600cAll versions
FortinetFortigate-60cAll versions
FortinetFortigate-620bAll versions
FortinetFortigate-800cAll versions
FortinetFortigate-80cAll versions
FortinetFortigate-Voice-80cAll versions
FortinetFortigaterugged-100cAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2012-4948?
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.
How severe is CVE-2012-4948?
Severity scoring for CVE-2012-4948 is pending analysis. The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.
How do I fix CVE-2012-4948?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-4948?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST