cve.bz

CVE-2020-7042

5.3 mediumEPSS 1.6%

Medium (5.3). EPSS 1.6% chance of exploitation in the next 30 days.

An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted (only a malformed certificate may be accepted).

Severity

CVSS 3.1

5.3 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWEs
CWE-295, CWE-908
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON