Skip to content
OpenAdvisories
High · 7.5 CVE-2021-26108 EUVD-2021-12929GHSA-qv52-3gx5-px5v

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reve…

Published Dec 8, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiOS Category: Network devices

Description

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiOS FortiOS before 7.0.1 —

References