CVE-2015-1570

The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it…

published February 10, 2015

CVSS
—
EPSS
1%
Percentile
42.3
In the wild
Unconfirmed
What it is

The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00506 · 42.3th percentile
Published
2015-02-10T20:00Z
EPSS history
Timeline
  • 10 FEB 20:00Z
    The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates, which makes it…
    cvelistv5