CVE-2018-9192

EPSS 1.1%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

05 set 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server's private key. Fortinet FortiOS 5.4.6 to 5.4.9, 6.0.0 and 6.0.1 are vulnerable by such attack under SSL Deep Inspection feature when CPx being used.

Produtos afetados

Fortinet, Inc. · FortiOS

Referências

https://fortiguard.com/advisory/FG-IR-17-302 https://robotattack.org/https://www.kb.cert.org/vuls/id/144389