CVE-2022-29054CWE-329

A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0, 7.0.0 through…

Low · published February 16, 2023

CVSS v3.1
3.1
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.9, 6.2.x and 6.0.x may allow an attacker in possession of the encrypted key to decipher it.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:U/RC:X
CVSS v4.0
Not supplied
EPSS
0.00174 · 6.6th percentile
Weakness
CWE-329 · Generation of Predictable IV with CBC Mode
Published
2023-02-16T18:07Z
EPSS history
Timeline
  • 16 FEB 18:07Z
    A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0, 7.0.0 through…
    cvelistv5