CVE:CVE-2013-1414
CNNVD:CNNVD-201307-116
Fortinet FortiOS是美国飞塔（Fortinet）公司开发的一套专用于FortiGate网络安全平台上的安全操作系统。该系统为用户提供防火墙、防病毒、IPSec/SSL VPN、Web内容过滤和反垃圾邮件等多种安全功能。
FortiGate防火墙设备4.3.12之前的版本和5.0.1及之前的5.x版本上的Fortinet FortiOS中存在多个跨站请求伪造漏洞。远程攻击者可通过重启防火墙利用该漏洞劫持管理员修改系统设置或防火墙策略、或重新启动设备的请求的身份认证。
solution:Upgrade fortinet fortios to a higher version than 4.3.12,4.3.10,5.0,5.0.1,and avoid the version (,4.3.12],4.3.10,5.0,5.0.1; Upgrade fortinet fortigate-1000c to a higher version than -; Upgrade fortinet fortigate-100d to a higher version than -; Upgrade fortinet fortigate-110c to a higher version than -; Upgrade fortinet fortigate-1240b to a higher version than -; Upgrade fortinet fortigate-200b to a higher version than -; Upgrade fortinet fortigate-20c to a higher version than -; Upgrade fortinet fortigate-300c to a higher version than -; Upgrade fortinet fortigate-3040b to a higher version than -; Upgrade fortinet fortigate-310b to a higher version than -; Upgrade fortinet fortigate-311b to a higher version than -; Upgrade fortinet fortigate-3140b to a higher version than -; Upgrade fortinet fortigate-3240c to a higher version than -; Upgrade fortinet fortigate-3810a to a higher version than -; Upgrade fortinet fortigate-3950b to a higher version than -; Upgrade fortinet fortigate-40c to a higher version than -; Upgrade fortinet fortigate-5001a-sw to a higher version than -; Upgrade fortinet fortigate-5001b to a higher version than -; Upgrade fortinet fortigate-5020 to a higher version than -; Upgrade fortinet fortigate-5060 to a higher version than -; Upgrade fortinet fortigate-50b to a higher version than -; Upgrade fortinet fortigate-5101c to a higher version than -; Upgrade fortinet fortigate-5140b to a higher version than -; Upgrade fortinet fortigate-600c to a higher version than -; Upgrade fortinet fortigate-60c to a higher version than -; Upgrade fortinet fortigate-620b to a higher version than -; Upgrade fortinet fortigate-800c to a higher version than -; Upgrade fortinet fortigate-80c to a higher version than -; Upgrade fortinet fortigate-voice-80c to a higher version than -; Upgrade fortinet fortigaterugged-100c to a higher version than -