Skip to content
OpenAdvisories
High · 7.8 CVE-2024-54027 EUVD-2025-6585GHSA-qcqx-4h2x-x43j

A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0…

Published Mar 17, 2025 · Updated Feb 26, 2026 · Assigned by fortinet

Vendor: Fortinet Product: FortiSandbox Category: Network devices

Description

A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, version 3.1.5 and below, version 3.0.7 to 3.0.5 may allow a privileged attacker with super-admin profile and CLI access to read sensitive data via CLI.

Affected products

VendorProductAffectedFixed
Fortinet FortiSandbox 5.0.0, 4.4.0 – ≤ 4.4.6, 4.2.1 – ≤ 4.2.7, 4.0.0 – ≤ 4.0.5, 3.2.0 – ≤ 3.2.4, 3.1.0 – ≤ 3.1.5, 3.0.5 – ≤ 3.0.7 —

Advisories 2

References