NetSight
high7.5

CVE-2021-26108

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering.

Impact

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering.

Affected products

VendorProductAffected versions
FortinetFortios
from 5.6.0 through 5.6.13
from 6.0.0 through 6.0.12
from 6.2.0 through 6.2.8
from 6.4.0 through 6.4.5
Version 7.0.0

Weakness classification

References