CVE-2018-9194

5.9 mediumEPSS 1.1%

Medium (5.9) in fortinet fortios. EPSS 1.1% chance of exploitation in the next 30 days.

A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server's private key. Fortinet FortiOS 5.4.6 to 5.4.9, 6.0.0 and 6.0.1 are vulnerable by such attack under VIP SSL feature when CPx being used.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-203
Published: 2018-09-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios

References

https://fortiguard.com/advisory/FG-IR-17-302
https://robotattack.org/
https://www.kb.cert.org/vuls/id/144389
https://fortiguard.com/advisory/FG-IR-17-302
https://robotattack.org/

Check your stack JSON