What’s Vulnerable › Vulnerabilities

CVE-2016-8492

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-02-08 · updated 2026-06-17
• Weakness: CWE-200

Description

The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption.

Affected products

• Fortinet FortiOS (FortiGate): through 4.3.18; 4.3.0, 4.3.10, 4.3.12, 4.3.13, 4.3.14, 4.3.15 (+2)

References

• http://www.securityfocus.com/bid/94480
• https://fortiguard.com/advisory/FG-IR-16-067
• http://www.securityfocus.com/bid/94480
• https://fortiguard.com/advisory/FG-IR-16-067

Get alerted when CVE-2016-8492 or the next vulnerability affects your stack