CVE-2013-1414

🗓️ 08 Jul 2013 17:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 114 Views🌐 WEB

Cross-site request forgery vulnerabilities in Fortinet FortiO

Reporter	Title	Published	Views	Family All 13
0day.today	Fortigate Firewalls - CSRF Vulnerability	1 Jul 201300:00	–	zdt
BDU FSTEC	The vulnerability in the FortiOS operating system’s web interface allows a hacker to perform cross-site fraudulently.	1 Nov 201800:00	–	bdu_fstec
Cvelist	CVE-2013-1414	8 Jul 201317:00	–	cvelist
Exploit DB	Fortigate Firewalls - Cross-Site Request Forgery	1 Jul 201300:00	–	exploitdb
EUVD	EUVD-2013-1452	7 Oct 202500:30	–	euvd
exploitpack	Fortigate Firewalls - Cross-Site Request Forgery	1 Jul 201300:00	–	exploitpack
Fortinet	Multiple CSRF Vulnerabilities in FortiGate	8 Jul 201300:00	–	fortinet
Tenable Nessus	Fortinet FortiOS < 4.3.13 / 5.0.3 Multiple XSRF	15 Apr 201400:00	–	nessus
NVD	CVE-2013-1414	8 Jul 201317:55	–	nvd
Packet Storm	Fortigate Firewall Cross Site Request Forgery	28 Jun 201300:00	–	packetstorm

NVD

Node

fortinet fortiosRange≤4.3.12

OR

fortinet fortiosMatch4.3.10

OR

fortinet fortiosMatch5.0

OR

fortinet fortiosMatch5.0.1

AND

fortinet fortigate-1000cMatch-

OR

fortinet fortigate-100dMatch-

OR

fortinet fortigate-110cMatch-

OR

fortinet fortigate-1240bMatch-

OR

fortinet fortigate-200bMatch-

OR

fortinet fortigate-20cMatch-

OR

fortinet fortigate-300cMatch-

OR

fortinet fortigate-3040bMatch-

OR

fortinet fortigate-310bMatch-

OR

fortinet fortigate-311bMatch-

OR

fortinet fortigate-3140bMatch-

OR

fortinet fortigate-3240cMatch-

OR

fortinet fortigate-3810aMatch-

OR

fortinet fortigate-3950bMatch-

OR

fortinet fortigate-40cMatch-

OR

fortinet fortigate-5001a-swMatch-

OR

fortinet fortigate-5001bMatch-

OR

fortinet fortigate-5020Match-

OR

fortinet fortigate-5060Match-

OR

fortinet fortigate-50bMatch-

OR

fortinet fortigate-5101cMatch-

OR

fortinet fortigate-5140bMatch-

OR

fortinet fortigate-600cMatch-

OR

fortinet fortigate-60cMatch-

OR

fortinet fortigate-620bMatch-

OR

fortinet fortigate-800cMatch-

OR

fortinet fortigate-80cMatch-

OR

fortinet fortigate-voice-80cMatch-

OR

fortinet fortigaterugged-100cMatch-

Source	Link
exploit-db	www.exploit-db.com/exploits/26528/

Parameter	Position	Path	Description	CWE
reason	request body	system/maintenance/shutdown	CSRF vulnerability allowing unauthorized POST to shutdown/reboot Fortinet FortiGate via /system/maintenance/shutdown when CSRF protections are absent.	CWE-352
action	request body	system/maintenance/shutdown	CSRF vulnerability allowing unauthorized POST to shutdown/reboot Fortinet FortiGate via /system/maintenance/shutdown when CSRF protections are absent.	CWE-352
add	request body	system/maintenance/shutdown	CSRF vulnerability allowing unauthorized POST to shutdown/reboot Fortinet FortiGate via /system/maintenance/shutdown when CSRF protections are absent.	CWE-352

16 Jun 2026 23:51Current

7.2High risk

Vulners AI Score7.2

CVSS 25.1

EPSS0.02286

fortinet fortios cross-site request forgery csrf vulnerabilities firewall remote attackers authentication