CVE-2013-1414

Published: Jul 8, 2013Modified: Apr 29, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify (1) settings or (2) policies, or (3) restart the device via a rebootme action to system/maintenance/shutdown.

Affected (33)

Products: Fortinet: Fortios, Fortigate 1000c, Fortigate 100d, Fortigate 110c, Fortigate 1240b, Fortigate 200b, Fortigate 20c, Fortigate 300c, Fortigate 3040b, Fortigate 310b, Fortigate 311b, Fortigate 3140b, Fortigate 3240c, Fortigate 3810a, Fortigate 3950b, Fortigate 40c, Fortigate 5001a Sw, Fortigate 5001b, Fortigate 5020, Fortigate 5060, Fortigate 50b, Fortigate 5101c, Fortigate 5140b, Fortigate 600c, Fortigate 60c, Fortigate 620b, Fortigate 800c, Fortigate 80c, Fortigate Voice 80c, Fortigaterugged 100c

30 products

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	Up to 4.3.12
Fortinet Fortios	Version 4.3.10
Fortinet Fortios	Version 5.0.1
Fortinet Fortios	Version 5.0
Fortinet Fortigate 1000c	All versions
Fortinet Fortigate 100d	All versions
Fortinet Fortigate 110c	All versions
Fortinet Fortigate 1240b	All versions
Fortinet Fortigate 200b	All versions
Fortinet Fortigate 20c	All versions
Fortinet Fortigate 300c	All versions
Fortinet Fortigate 3040b	All versions
Fortinet Fortigate 310b	All versions
Fortinet Fortigate 311b	All versions
Fortinet Fortigate 3140b	All versions
Fortinet Fortigate 3240c	All versions
Fortinet Fortigate 3810a	All versions
Fortinet Fortigate 3950b	All versions
Fortinet Fortigate 40c	All versions
Fortinet Fortigate 5001a Sw	All versions
Fortinet Fortigate 5001b	All versions
Fortinet Fortigate 5020	All versions
Fortinet Fortigate 5060	All versions
Fortinet Fortigate 50b	All versions
Fortinet Fortigate 5101c	All versions
Fortinet Fortigate 5140b	All versions
Fortinet Fortigate 600c	All versions
Fortinet Fortigate 60c	All versions
Fortinet Fortigate 620b	All versions
Fortinet Fortigate 800c	All versions
Fortinet Fortigate 80c	All versions
Fortinet Fortigate Voice 80c	All versions
Fortinet Fortigaterugged 100c	All versions

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

http://www.exploit-db.com/exploits/26528/

Source: cve@mitre.org

Exploit

http://www.exploit-db.com/exploits/26528/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.