What is the CVSS score of CVE-2012-4948?

CVE-2012-4948 has a CVSS 2.0 base score of 5.3 (Medium). CVSS vector: AV:A/AC:H/Au:N/C:C/I:P/A:N. EPSS exploitation probability: 0.2%.

Fortigate 1000C CVE-2012-4948

MEDIUM

Improper Certificate Validation (CWE-295)

2012-11-14 cret@cert.org

Fortinet Information Disclosure Fortigate 1000C Fortigate 100D Fortigate 110C Fortigate 1240B Fortigate 200B Fortigate 20C Fortigate 300C Fortigate 3040B Fortigate 310B Fortigate 311B Fortigate 3140B Fortigate 3240C Fortigate 3810A Fortigate 3950B Fortigate 40C Fortigate 5001A Sw Fortigate 5001B Fortigate 5020 Fortigate 5060 Fortigate 50B Fortigate 5101C Fortigate 5140B Fortigate 600C Fortigate 60C Fortigate 620B Fortigate 800C Fortigate 80C Fortigate Voice 80C Fortigaterugged 100C

5.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:A/AC:H/Au:N/C:C/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:H/Au:N/C:C/I:P/A:N

Attack Vector

Adjacent

Attack Complexity

High

Confidentiality

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Nov 14, 2012 - 12:30 cve.org

MEDIUM 5.3

DescriptionCVE.org

The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.

AnalysisAI

The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier. Rated medium severity (CVSS 5.3). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-295. The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities. Affected products include: Fortinet Fortigate-1000C, Fortinet Fortigate-100D, Fortinet Fortigate-110C, Fortinet Fortigate-1240B, Fortinet Fortigate-200B.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.