CVE-2013-1414

🗓️ 08 Jul 2013 17:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 152 Views🌐 WEB

Cross-site request forgery vulnerabilities in Fortinet FortiO

Reporter	Title	Published	Views	Family All 15
zdt	Fortigate Firewalls - CSRF Vulnerability	1 Jul 201300:00	–	zdt
BDU FSTEC	FortiOS Web Interface Cross Site Fraudulently	1 Nov 201800:00	–	bdu_fstec
Cvelist	CVE-2013-1414	8 Jul 201317:00	–	cvelist
Exploit DB	Fortigate Firewalls - Cross-Site Request Forgery	1 Jul 201300:00	–	exploitdb
EUVD	EUVD-2013-1452	7 Oct 202500:30	–	euvd
exploitpack	Fortigate Firewalls - Cross-Site Request Forgery	1 Jul 201300:00	–	exploitpack
Fortinet	Multiple CSRF Vulnerabilities in FortiGate	8 Jul 201300:00	–	fortinet
Tenable Nessus	Fortinet FortiOS < 4.3.13 / 5.0.3 Multiple XSRF	15 Apr 201400:00	–	nessus
NVD	CVE-2013-1414	8 Jul 201317:55	–	nvd
Packet Storm	Fortigate Firewall Cross Site Request Forgery	28 Jun 201300:00	–	packetstorm

NVD

Node

AND

OR

fortinet fortiosRange≤4.3.12

fortinet fortiosMatch4.3.10

fortinet fortiosMatch5.0

fortinet fortiosMatch5.0.1

OR

fortinet fortigate-1000cMatch-

fortinet fortigate-100dMatch-

fortinet fortigate-110cMatch-

fortinet fortigate-1240bMatch-

fortinet fortigate-200bMatch-

fortinet fortigate-20cMatch-

fortinet fortigate-300cMatch-

fortinet fortigate-3040bMatch-

fortinet fortigate-310bMatch-

fortinet fortigate-311bMatch-

fortinet fortigate-3140bMatch-

fortinet fortigate-3240cMatch-

fortinet fortigate-3810aMatch-

fortinet fortigate-3950bMatch-

fortinet fortigate-40cMatch-

fortinet fortigate-5001a-swMatch-

fortinet fortigate-5001bMatch-

fortinet fortigate-5020Match-

fortinet fortigate-5060Match-

fortinet fortigate-50bMatch-

fortinet fortigate-5101cMatch-

fortinet fortigate-5140bMatch-

fortinet fortigate-600cMatch-

fortinet fortigate-60cMatch-

fortinet fortigate-620bMatch-

fortinet fortigate-800cMatch-

fortinet fortigate-80cMatch-

fortinet fortigate-voice-80cMatch-

fortinet fortigaterugged-100cMatch-

Source	Link
exploit-db	www.exploit-db.com/exploits/26528/

Parameter	Position	Path	Description	CWE
reason	request body	/system/maintenance/shutdown	CSRF vulnerability in FortiOS allowing remote attackers to reboot the device via the shutdown action.	CWE-352
action	request body	/system/maintenance/shutdown	CSRF vulnerability in FortiOS allowing remote attackers to reboot the device via the shutdown action.	CWE-352

16 Jun 2026 23:51Current

7.2High risk

Vulners AI Score7.2

CVSS 25.1

EPSS0.02286

fortinet fortios cross-site request forgery csrf vulnerabilities firewall remote attackers authentication