What is CVE-2019-15703?

CVE-2019-15703 is a high-severity vulnerability in Fortinet Fortios, classified under Insufficient Entropy. CVSS score: 7.5/10. Published 2019-10-24.

How severe is CVE-2019-15703?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Fortinet Fortios

CVE-2019-15703

An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable hardware TRNG token and models not support builtin TRNG seed allows attacker to theoretically recover the long term ECDSA…

EPSS: 0.010 (58.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Fortinet Fortios — versions 6.2.1, 6.2.0, 6.0.8 and below
Fortinet Fortios

Weakness classification (CWE)

CWE-331 — Insufficient Entropy

References

psirt@fortinet.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-15703?: CVE-2019-15703 is a high-severity vulnerability in Fortinet Fortios, classified under Insufficient Entropy. CVSS score: 7.5/10. Published 2019-10-24.
How severe is CVE-2019-15703?: High severity. CVSS v3 base score is 7.5 out of 10.