CVE-2012-4948

Severity: medium (CVSS 5.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-11-14 · updated 2026-06-16
Weakness: CWE-295

Description

The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.

Affected products

Fortinet Fortigate-1000C: all versions
Fortinet Fortigate-100D: all versions
Fortinet Fortigate-110C: all versions
Fortinet Fortigate-1240B: all versions
Fortinet Fortigate-200B: all versions
Fortinet Fortigate-20C: all versions
Fortinet Fortigate-300C: all versions
Fortinet Fortigate-3040B: all versions
Fortinet Fortigate-310B: all versions
Fortinet Fortigate-311B: all versions
Fortinet Fortigate-3140B: all versions
Fortinet Fortigate-3240C: all versions
Fortinet Fortigate-3810A: all versions
Fortinet Fortigate-3950B: all versions
Fortinet Fortigate-40C: all versions
Fortinet Fortigate-5001A-Sw: all versions
Fortinet Fortigate-5001B: all versions
Fortinet Fortigate-5020: all versions
Fortinet Fortigate-5060: all versions
Fortinet Fortigate-50B: all versions
Fortinet Fortigate-5101C: all versions
Fortinet Fortigate-5140B: all versions
Fortinet Fortigate-600C: all versions
Fortinet Fortigate-60C: all versions
Fortinet Fortigate-620B: all versions
Fortinet Fortigate-800C: all versions
Fortinet Fortigate-80C: all versions
Fortinet Fortigate-Voice-80C: all versions
Fortinet Fortigaterugged-100C: all versions

References

Get alerted when CVE-2012-4948 or the next vulnerability affects your stack