Cryptographic Algorithm Vulnerability in FortiWAN by Fortinet
CVE-2021-32593

6.5MEDIUM

Key Information:

Vendor
Fortinet
Status
Fortinet Fortiwan
Vendor
CVE Published:
6 April 2022

Summary

A vulnerability in the Dynamic Tunnel Protocol of FortiWAN versions before 4.5.9 allows an unauthenticated remote attacker to exploit a broken cryptographic algorithm. This flaw can enable the attacker to decrypt and forge communications within the protocol, potentially compromising the integrity and confidentiality of the data being transmitted.

Affected Version(s)

Fortinet FortiWAN FortiWAN before 4.5.9

References

https://fortiguard.com/psirt/FG-IR-21-070
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.