Lucene search
FortiGuard LabsFG-IR-22-257HistoryFeb 16, 2023 - 12:00 a.m.
Protect
2023-02-1600:00:00
FortiGuard Labs
www.fortiguard.com
41
certificate validation
vulnerability
fortios
fortiproxy
man-in-the-middle attack
remote servers
threat feeds
fabric connectors
EPSS
0.001
Percentile
39.5%
An improper certificate validation vulnerability [CWE-295] in FortiOS and FortiProxy may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the FortiOS/FortiProxy device and remote servers hosting threat feeds (when the latter are configured as Fabric connectors in FortiOS/FortiProxy)
Related
nessus
nessus
nvd
nvd
CVE-2022-39948
2023-02-16 19:15:12
cvelist
cvelist
CVE-2022-39948
2023-02-16 18:06:29
prion
prion
Input validation
2023-02-16 19:15:00
cve
cve
CVE-2022-39948
2023-02-16 19:15:12
ics
ics
Siemens RUGGEDCOM APE1808 with Fortigate NGFW Devices
2024-03-14 12:00:00