FortiOS 5.2
Fortinet, Inc. - FIPS 140 #2765
The FortiOS is a firmware based operating system that runs exclusively on Fortinet's FortiGate/FortiWiFi product family. The FortiOS provides integrated firewall, VPN, antivirus, antispam, intrusion prevention, content filtering and traffic shaping and HA capabilities.
Key facts
- Scheme
- FIPS 140
- Certificate
- 2765
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Fortinet, Inc.
- Module type
- Firmware
- Embodiment
- Multi-Chip Stand Alone
- Lab
- CGI Information Systems & Management Consultants Inc
- First validated
- October 7, 2016
- Versions
- 5.2.7, build0718,160328
- Caveat
- When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. There is no assurance of the minimum strength of generated keys
Algorithms
- AES
- CVL
- DRBG
- HMAC
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2022-42475CRITICAL 9.8KEVEPSS 99.5%
- CVE-2020-12812CRITICAL 9.8KEVEPSS 45.4%
- CVE-2019-6693MEDIUM 6.5KEVEPSS 6.6%
- CVE-2019-5591MEDIUM 6.5KEVEPSS 18.6%
- CVE-2018-13383MEDIUM 4.3KEVEPSS 33.6%
- CVE-2018-13374MEDIUM 4.3KEVEPSS 38.1%
- CVE-2021-44168LOW 3.3KEVEPSS 0.9%
- CVE-2015-7361HIGH 9.3EPSS 3.4%
- CVE-2018-13371HIGH 8.8EPSS 1.3%
- CVE-2018-9185HIGH 8.1EPSS 2.1%
- CVE-2022-22299HIGH 7.8EPSS 0.2%
- CVE-2019-15705HIGH 7.5EPSS 1.8%
- CVE-2019-15703HIGH 7.5EPSS 1.0%
- CVE-2018-13376HIGH 7.5EPSS 2.1%
- CVE-2017-3130HIGH 7.5EPSS 1.4%
- CVE-2017-17544HIGH 7.2EPSS 1.7%
- CVE-2023-45583MEDIUM 6.7EPSS 0.7%
- CVE-2021-42757MEDIUM 6.7EPSS 0.5%
- CVE-2019-5587MEDIUM 6.5EPSS 0.5%
- CVE-2015-2323MEDIUM 6.4EPSS 1.5%
- CVE-2017-14187MEDIUM 6.2EPSS 0.4%
- CVE-2019-5586MEDIUM 6.1EPSS 0.8%
- CVE-2018-13384MEDIUM 6.1EPSS 1.4%
- CVE-2017-7739MEDIUM 6.1EPSS 1.1%
- CVE-2017-3133MEDIUM 6.1EPSS 10.7%
- CVE-2017-3132MEDIUM 6.1EPSS 8.1%
- CVE-2017-3127MEDIUM 6.1EPSS 1.0%
- CVE-2017-14190MEDIUM 6.1EPSS 1.1%
- CVE-2016-3978MEDIUM 6.1EPSS 5.9%
- CVE-2018-9195MEDIUM 5.9EPSS 1.6%
- CVE-2016-7541MEDIUM 5.9EPSS 1.0%
- CVE-2019-5593MEDIUM 5.5EPSS 0.2%
- CVE-2020-12820MEDIUM 5.4EPSS 0.9%
- CVE-2020-12819MEDIUM 5.4EPSS 0.8%
- CVE-2019-17656MEDIUM 5.4EPSS 1.6%
- CVE-2017-7735MEDIUM 5.4EPSS 0.8%
- CVE-2017-14186MEDIUM 5.4EPSS 3.7%
- CVE-2026-71408MEDIUM 5.3EPSS 0.4%
- CVE-2020-6648MEDIUM 5.3EPSS 0.6%
- CVE-2019-17655MEDIUM 5.3EPSS 1.0%
- CVE-2018-13381MEDIUM 5.3EPSS 1.8%
- CVE-2018-13367MEDIUM 5.3EPSS 0.9%
- CVE-2018-13366MEDIUM 5.3EPSS 0.9%
- CVE-2018-13365MEDIUM 5.3EPSS 0.9%
- CVE-2017-14185MEDIUM 5.3EPSS 1.3%
- CVE-2023-33305MEDIUM 4.9EPSS 0.8%
- CVE-2016-7542MEDIUM 4.9EPSS 1.5%
- CVE-2017-3128MEDIUM 4.8EPSS 0.7%
- CVE-2022-23438MEDIUM 4.7EPSS 0.7%
- CVE-2021-26092MEDIUM 4.7EPSS 1.1%
and 5 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain