CVE-2012-4948
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification...
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.
Exploit likelihood
What each source reports
NVD Score used
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.
- Record
CVE-2012-4948- CVSS 2.0
- 5.3 Medium
AV:A/AC:H/Au:N/C:C/I:P/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
CVE List No score
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.
- Record
CVE-2012-4948- Updated
- 2026-11-02
EUVDEUVD-2012-4873 No score
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.
- Record
EUVD-2012-4873- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p5m6-f3fp-3v88 No score
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification...
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.
- Record
GHSA-p5m6-f3fp-3v88- Weakness
- CWE-295
- Updated
- 2026-11-02
Affected products
- fortinet fortigate-1000c
- fortinet fortigate-100d
- fortinet fortigate-110c
- fortinet fortigate-1240b
- fortinet fortigate-200b
- fortinet fortigate-20c
- fortinet fortigate-300c
- fortinet fortigate-3040b
- fortinet fortigate-310b
- fortinet fortigate-311b
- fortinet fortigate-3140b
- fortinet fortigate-3240c
Show 17 moreShow less
- fortinet fortigate-3810a
- fortinet fortigate-3950b
- fortinet fortigate-40c
- fortinet fortigate-5001a-sw
- fortinet fortigate-5001b
- fortinet fortigate-5020
- fortinet fortigate-5060
- fortinet fortigate-50b
- fortinet fortigate-5101c
- fortinet fortigate-5140b
- fortinet fortigate-600c
- fortinet fortigate-60c
- fortinet fortigate-620b
- fortinet fortigate-800c
- fortinet fortigate-80c
- fortinet fortigate-voice-80c
- fortinet fortigaterugged-100c
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-4948 is a medium vulnerability (CVSS 5.3) in Fortinet Fortigate-1000c, published November 14, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.