CVE-2017-17543
Last modified
CVE-2017-17543 is a vulnerability of currently unknown severity. Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak encryption algorithms.. EPSS estimates a 0.45% chance of exploitation in the next 30 days.
Description
Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak encryption algorithms.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Forticlient | <= 5.6.0 |
| Fortinet | Forticlient Sslvpn Client | <= 4.4.2335 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-17543?
How severe is CVE-2017-17543?
How do I fix CVE-2017-17543?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-17537MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthent…
- CVE-2017-17538MikroTik v6.40.5 devices allow remote attackers to cause a d…
- CVE-2017-17539The presence of a hardcoded account in Fortinet FortiWLC 7.0…
- CVE-2017-17540The presence of a hardcoded account in Fortinet FortiWLC 8.3…
- CVE-2017-17541A Cross-site Scripting (XSS) vulnerability in Fortinet Forti…
- CVE-2017-17542Rejected reason: Not used
- CVE-2017-17544A privilege escalation vulnerability in Fortinet FortiOS 6.0…7.2
- CVE-2017-17545Rejected reason: Not used
- CVE-2017-17546Rejected reason: Not used
- CVE-2017-17547Rejected reason: Not used
- CVE-2017-17548Rejected reason: Not used
- CVE-2017-17549Citrix NetScaler Application Delivery Controller (ADC) and N…
Are you affected by CVE-2017-17543?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST