Unscored severity · published Jul 8, 2013
CVE-2013-1414
Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify (1) settings or (2) policies, or (3) restart the device via a rebootme action to system/maintenance/shutdown.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
FortiOS · Fortinet
through 4.3.12; 4.3.10; 5.0; 5.0.1 · source: NVD
FO
Fortigate-1000c · Fortinet
All versions, or not specified · source: NVD
FO
Fortigate-100d · Fortinet
All versions, or not specified · source: NVD
FO
Fortigate-110c · Fortinet
All versions, or not specified · source: NVD
FO
Fortigate-1240b · Fortinet
All versions, or not specified · source: NVD
FO
Fortigate-200b · Fortinet
All versions, or not specified · source: NVD
FO
Fortigate-20c · Fortinet
All versions, or not specified · source: NVD
FO
Fortigate-300c · Fortinet
All versions, or not specified · source: NVD
FO
Fortigate-3040b · Fortinet
All versions, or not specified · source: NVD
FO
Fortigate-310b · Fortinet
All versions, or not specified · source: NVD
FO
Fortigate-311b · Fortinet
All versions, or not specified · source: NVD
FO
Fortigate-3140b · Fortinet
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1414
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1414
Exploit
http://www.exploit-db.com/exploits/26528/
More from FortiOS
9.8
CVE-2026-24858
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
9.8
CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
9.8
CVE-2025-59718
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
9.8
CVE-2024-55591
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
9.8
CVE-2024-23113
Fortinet Multiple Products Format String Vulnerability