CVE-2016-8492

The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption.

Score

CVSS 3.0 5.9 Medium

Status

Modified - psirt@fortinet.com

Published

2017-02-08

Last modified

2024-10-25

Weaknesses

CWE-200

Affected products

• Fortinet Fortigate (Fortinet)
• Fortios (Fortinet)

References

• http://www.securityfocus.com/bid/94480
• https://fortiguard.com/advisory/FG-IR-16-067