Description
A key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below may allow an unauthenticated attacker to perform a man in the middle attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | Fortinet FortiOS | FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below | — |