CVE-2012-4948
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification...
CVE-2012-4948 is a medium vulnerability (CVSS 5.3) in Fortinet Fortigate-1000c, published November 14, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.
- Severity
- 5.3 MediumCVSS 2.0, NVD
- Exploit chance
- 0.33%EPSS, 26th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.
Exploit likelihood
Affected products
- fortinet fortigate-1000c
- fortinet fortigate-100d
- fortinet fortigate-110c
- fortinet fortigate-1240b
- fortinet fortigate-200b
- fortinet fortigate-20c
- fortinet fortigate-300c
- fortinet fortigate-3040b
- fortinet fortigate-310b
- fortinet fortigate-311b
- fortinet fortigate-3140b
- fortinet fortigate-3240c
Show 17 moreShow less
- fortinet fortigate-3810a
- fortinet fortigate-3950b
- fortinet fortigate-40c
- fortinet fortigate-5001a-sw
- fortinet fortigate-5001b
- fortinet fortigate-5020
- fortinet fortigate-5060
- fortinet fortigate-50b
- fortinet fortigate-5101c
- fortinet fortigate-5140b
- fortinet fortigate-600c
- fortinet fortigate-60c
- fortinet fortigate-620b
- fortinet fortigate-800c
- fortinet fortigate-80c
- fortinet fortigate-voice-80c
- fortinet fortigaterugged-100c
What each source reports
NVD Score used
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.
- Record
CVE-2012-4948- CVSS 2.0
- 5.3 Medium
AV:A/AC:H/Au:N/C:C/I:P/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
CVE ListNo score
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.
- Record
CVE-2012-4948- Updated
- 2026-11-02
EUVDEUVD-2012-4873No score
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.
- Record
EUVD-2012-4873- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p5m6-f3fp-3v88No score
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification...
The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.
- Record
GHSA-p5m6-f3fp-3v88- Weakness
- CWE-295
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.