Cross-Site Request Forgery Vulnerability in Fortinet FortiGate Firewall
CVE-2013-1414

Currently unrated

Key Information:

Vendor

Fortinet
Status
Fortios
Fortigate-1000c
Fortigate-100d
Fortigate-110c
Vendor
CVE Published:
8 July 2013

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2013-1414?

Fortinet FortiGate firewall devices are susceptible to multiple cross-site request forgery vulnerabilities, allowing remote attackers to bypass authentication. By exploiting these weaknesses, an attacker can manipulate settings, alter security policies, or trigger a reboot sequence on the device. This vulnerability poses significant risks to the integrity and availability of device management, leading to potential unauthorized changes and operational disruptions.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2013-1414 - Proof of Concept

References

http://www.exploit-db.com/exploits/26528/
exploitx_refsource_EXPLOIT-DB

Timeline

  • Vulnerability Reserved

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

.