Medium · 6.5 CVE-2021-32593 EUVD-2021-19433GHSA-r38h-c57m-fw47

A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allo…

Published Apr 6, 2022 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiWAN Category: Network devices

Description

A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages.

Affected products

Vendor	Product	Affected	Fixed
Fortinet	Fortinet FortiWAN	FortiWAN before 4.5.9	—

References

https://fortiguard.com/psirt/FG-IR-21-070