CVE-2013-1414

CVE Database · CVE-2013-1414

CVE-2013-1414

· N/AModified

CVSS v3.1

N/A

EPSS

2.29%

Published

Jul 8, 2013

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBFortigate Firewalls - Cross-Site Request Forgery TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify (1) settings or (2) policies, or (3) restart the device via a rebootme action to system/maintenance/shutdown.

Weaknesses (CWE)

CWE-352

Affected Products (33)

fortinet · fortiosvulnerable

fortinet · fortigate-1000cvulnerable

fortinet · fortigate-100dvulnerable

fortinet · fortigate-110cvulnerable

fortinet · fortigate-1240bvulnerable

fortinet · fortigate-200bvulnerable

fortinet · fortigate-20cvulnerable

References (2)

http://www.exploit-db.com/exploits/26528/

Exploit

http://www.exploit-db.com/exploits/26528/

Exploit

KEV Catalog EPSS Scores Vendors All CVEs