CVE-2018-9194

Description

A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the servers private key. Fortinet FortiOS 5.4.6 to 5.4.9, 6.0.0 and 6.0.1 are vulnerable by such attack under VIP SSL feature when CPx being used.

Risk Information

Base Score

5.9

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.174

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-13365 ,CVE-2018-13366 ,CVE-2018-9192 ,CVE-2018-9194 are affected in fortios 6.0.1	NCM
Observable Discrepancy Vulnerability (CVE-2018-9194)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234