CVE-2019-15703

🗓️ 24 Oct 2019 13:53:17Reported by fortinetType

Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable hardware TRNG token and models not support builtin TRNG seed allows attacker to theoretically recover the long term ECDSA secret in a TLS client with a RSA handshake and mutual ECDSA authentication

Reporter	Title	Published	Views	Family All 10
CNVD	Unspecified Vulnerability in Fortinet FortiOS	23 Oct 201900:00	–	cnvd
Cvelist	CVE-2019-15703	24 Oct 201913:53	–	cvelist
EUVD	EUVD-2019-6640	7 Oct 202500:30	–	euvd
Fortinet	Protect	13 Feb 202000:00	–	fortinet
Tenable Nessus	FortiOS DRBG unsufficient entropy (FG-IR-19-186)	25 Oct 201900:00	–	nessus
NVD	CVE-2019-15703	24 Oct 201914:15	–	nvd
Prion	Design/Logic Flaw	24 Oct 201914:15	–	prion
RedhatCVE	CVE-2019-15703	22 May 202508:12	–	redhatcve
Symantec	Fortinet FortiOS CVE-2019-15703 Insufficient Entropy Vulnerability	18 Oct 201900:00	–	symantec
Vulnrichment	CVE-2019-15703	24 Oct 201913:53	–	vulnrichment

NVD

Node

fortinet fortiosRange≤5.6.9

fortinet fortiosRange6.0.0–6.0.9

fortinet fortiosRange6.2.0–6.2.3

[
  {
    "product": "Fortinet FortiOS",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.1"
      },
      {
        "status": "affected",
        "version": "6.2.0"
      },
      {
        "status": "affected",
        "version": "6.0.8 and below"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-19-186

21 Nov 2024 04:29Current

7.5High risk

Vulners AI Score7.5

CVSS 22.6

CVSS 3.17.5

EPSS0.003

SSVC

CWE-331