FortiOS 5.6
Fortinet, Inc. - FIPS 140 #3639
The FortiOS is a firmware based operating system that runs exclusively on Fortinet's FortiGate/FortiWiFi product family. The FortiOS provides integrated firewall, VPN, antivirus, antispam, intrusion prevention, content filtering and traffic shaping and HA capabilities.
Key facts
- Scheme
- FIPS 140
- Certificate
- 3639
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Fortinet, Inc.
- Module type
- Firmware
- Embodiment
- Multi-Chip Stand Alone
- Lab
- Lightship Security, Inc.
- First validated
- April 2, 2020
- Versions
- FortiOS 5.6, build6022,190808
- Caveat
- When operated in FIPS mode and installed, initialized and configured as specified in the FIPS 140-2 Compliant Operation Section of the Security Policy
Algorithms
- AES
- CVL
- DRBG
- ECDSA
- HMAC
- KTS
- RSA
- SHS
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2022-42475CRITICAL 9.8KEVEPSS 99.5%
- CVE-2020-12812CRITICAL 9.8KEVEPSS 45.4%
- CVE-2018-13382CRITICAL 9.1KEVEPSS 81.7%
- CVE-2018-13379CRITICAL 9.1KEVEPSS 100.0%
- CVE-2019-6693MEDIUM 6.5KEVEPSS 6.6%
- CVE-2019-5591MEDIUM 6.5KEVEPSS 18.6%
- CVE-2018-13383MEDIUM 4.3KEVEPSS 33.6%
- CVE-2018-13374MEDIUM 4.3KEVEPSS 38.1%
- CVE-2021-44168LOW 3.3KEVEPSS 0.9%
- CVE-2018-1352CRITICAL 9.8EPSS 1.2%
- CVE-2018-13371HIGH 8.8EPSS 1.3%
- CVE-2018-9185HIGH 8.1EPSS 2.1%
- CVE-2022-22299HIGH 7.8EPSS 0.2%
- CVE-2021-26110HIGH 7.8EPSS 0.3%
- CVE-2021-26108HIGH 7.5EPSS 1.1%
- CVE-2019-15705HIGH 7.5EPSS 1.8%
- CVE-2019-15703HIGH 7.5EPSS 1.0%
- CVE-2018-13376HIGH 7.5EPSS 2.1%
- CVE-2017-3130HIGH 7.5EPSS 1.4%
- CVE-2017-17544HIGH 7.2EPSS 1.7%
- CVE-2023-45583MEDIUM 6.7EPSS 0.7%
- CVE-2021-42757MEDIUM 6.7EPSS 0.5%
- CVE-2019-5587MEDIUM 6.5EPSS 0.5%
- CVE-2021-26103MEDIUM 6.3EPSS 0.4%
- CVE-2017-14187MEDIUM 6.2EPSS 0.4%
- CVE-2019-6696MEDIUM 6.1EPSS 0.7%
- CVE-2019-5586MEDIUM 6.1EPSS 0.8%
- CVE-2018-13384MEDIUM 6.1EPSS 1.4%
- CVE-2017-7739MEDIUM 6.1EPSS 1.1%
- CVE-2017-7733MEDIUM 6.1EPSS 1.3%
- CVE-2017-3133MEDIUM 6.1EPSS 10.7%
- CVE-2017-3132MEDIUM 6.1EPSS 8.1%
- CVE-2017-14190MEDIUM 6.1EPSS 1.1%
- CVE-2018-9195MEDIUM 5.9EPSS 1.6%
- CVE-2019-5593MEDIUM 5.5EPSS 0.2%
- CVE-2022-22305MEDIUM 5.4EPSS 0.5%
- CVE-2020-12820MEDIUM 5.4EPSS 0.9%
- CVE-2020-12819MEDIUM 5.4EPSS 0.8%
- CVE-2019-17656MEDIUM 5.4EPSS 1.6%
- CVE-2017-3131MEDIUM 5.4EPSS 7.7%
- CVE-2017-14186MEDIUM 5.4EPSS 3.7%
- CVE-2026-71408MEDIUM 5.3EPSS 0.4%
- CVE-2020-6648MEDIUM 5.3EPSS 0.6%
- CVE-2019-17655MEDIUM 5.3EPSS 1.0%
- CVE-2018-13381MEDIUM 5.3EPSS 1.8%
- CVE-2018-13367MEDIUM 5.3EPSS 0.9%
- CVE-2018-13366MEDIUM 5.3EPSS 0.9%
- CVE-2018-13365MEDIUM 5.3EPSS 0.9%
- CVE-2017-14185MEDIUM 5.3EPSS 1.3%
- CVE-2021-32600MEDIUM 5.0EPSS 0.6%
and 11 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain