FortiOS
Fortinet, Inc. - FIPS 140 #1431
The FortiOS is a firmware based operating system that runs exclusively on FortinetÆs FortiGate/FortiWiFi product family (PC-based, purpose built appliances)The FortiOS provides integrated firewall, VPN, antivirus, antispam, intrusion prevention, content filtering and traffic shaping and HA capabilities.
Key facts
- Scheme
- FIPS 140
- Certificate
- 1431
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Fortinet, Inc.
- Module type
- Firmware
- Embodiment
- Multi-Chip Stand Alone
- Lab
- DOMUS
- First validated
- November 3, 2010
- Versions
- FortiOS 4.0, build6341, 100617
- Caveat
- When operated in FIPS mode
Algorithms
- AES
- HMAC
- RNG
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2020-12812CRITICAL 9.8KEVEPSS 45.4%
- CVE-2019-6693MEDIUM 6.5KEVEPSS 6.6%
- CVE-2019-5591MEDIUM 6.5KEVEPSS 18.6%
- CVE-2018-13374MEDIUM 4.3KEVEPSS 38.1%
- CVE-2021-44168LOW 3.3KEVEPSS 0.9%
- CVE-2016-1909CRITICAL 9.8EPSS 71.3%
- CVE-2018-13371HIGH 8.8EPSS 1.3%
- CVE-2018-9185HIGH 8.1EPSS 2.1%
- CVE-2019-15705HIGH 7.5EPSS 1.8%
- CVE-2019-15703HIGH 7.5EPSS 1.0%
- CVE-2018-13376HIGH 7.5EPSS 2.1%
- CVE-2014-2216HIGH 7.5EPSS 5.1%
- CVE-2017-17544HIGH 7.2EPSS 1.7%
- CVE-2023-45583MEDIUM 6.7EPSS 0.7%
- CVE-2019-5587MEDIUM 6.5EPSS 0.5%
- CVE-2013-4604MEDIUM 6.5EPSS 1.1%
- CVE-2017-14187MEDIUM 6.2EPSS 0.4%
- CVE-2018-13384MEDIUM 6.1EPSS 1.4%
- CVE-2017-3133MEDIUM 6.1EPSS 10.7%
- CVE-2017-3132MEDIUM 6.1EPSS 8.1%
- CVE-2017-14190MEDIUM 6.1EPSS 1.1%
- CVE-2018-9195MEDIUM 5.9EPSS 1.6%
- CVE-2016-8492MEDIUM 5.9EPSS 1.4%
- CVE-2019-5593MEDIUM 5.5EPSS 0.2%
- CVE-2020-12820MEDIUM 5.4EPSS 0.9%
- CVE-2020-12819MEDIUM 5.4EPSS 0.8%
- CVE-2019-17656MEDIUM 5.4EPSS 1.6%
- CVE-2017-14186MEDIUM 5.4EPSS 3.7%
- CVE-2014-0351MEDIUM 5.4EPSS 0.6%
- CVE-2026-71408MEDIUM 5.3EPSS 0.4%
- CVE-2020-6648MEDIUM 5.3EPSS 0.6%
- CVE-2019-17655MEDIUM 5.3EPSS 1.0%
- CVE-2018-13381MEDIUM 5.3EPSS 1.8%
- CVE-2018-13367MEDIUM 5.3EPSS 0.9%
- CVE-2018-13366MEDIUM 5.3EPSS 0.9%
- CVE-2018-13365MEDIUM 5.3EPSS 0.9%
- CVE-2015-5965MEDIUM 5.0EPSS 2.1%
- CVE-2022-23438MEDIUM 4.7EPSS 0.7%
- CVE-2018-13380MEDIUM 4.7EPSS 62.5%
- CVE-2021-24018MEDIUM 4.3EPSS 1.0%
- CVE-2015-3626MEDIUM 4.3EPSS 1.2%
- CVE-2020-15938MEDIUM 4.0EPSS 0.8%
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain