Is CVE-2012-4948 being actively exploited?

CVE-2012-4948 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2012-4948?

CVE-2012-4948 has a CVSS 2.0 base score of 5.3 (MEDIUM).

CVE-2012-4948

MEDIUM · CVSS 5.3EPSS 0.3%EU EUVD

The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities.

Key facts

CVSS score: 5.3 (v2.0)
Severity: MEDIUM
CVSS vector: AV:A/AC:H/Au:N/C:C/I:P/A:N
Weakness (CWE): CWE-295
EPSS score: 0.3% (25th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2012-4873)
Published: November 14, 2012
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2012-4873 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

fortinet / fortigate-1000c
fortinet / fortigate-100d
fortinet / fortigate-110c
fortinet / fortigate-1240b
fortinet / fortigate-200b
fortinet / fortigate-20c
fortinet / fortigate-300c
fortinet / fortigate-3040b
fortinet / fortigate-310b
fortinet / fortigate-311b
fortinet / fortigate-3140b
fortinet / fortigate-3240c
fortinet / fortigate-3810a
fortinet / fortigate-3950b
fortinet / fortigate-40c
fortinet / fortigate-5001a-sw
fortinet / fortigate-5001b
fortinet / fortigate-5020
fortinet / fortigate-5060
fortinet / fortigate-50b
fortinet / fortigate-5101c
fortinet / fortigate-5140b
fortinet / fortigate-600c
fortinet / fortigate-60c
fortinet / fortigate-620b
fortinet / fortigate-800c
fortinet / fortigate-80c
fortinet / fortigate-voice-80c
fortinet / fortigaterugged-100c

Certified products that may be affected

21 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

FortiGate-5140B Chassis with FortiGate-5001D Blade - Fortinet, Inc. - FIPS 140 2790 - historical
FortiGate-100D/200D/300D/500D - Fortinet, Inc. - FIPS 140 2781 - historical
FortiGate-5140B Chassis with FortiGate/FortiSwitch 5000 Series Blades - Fortinet, Inc. - FIPS 140 2372 - historical
FortiGate-60C/60D/80C and FortiWiFi-60C/60D - Fortinet, Inc. - FIPS 140 2366 - historical
FortiGate-100D, FortiGate-200B, FortiGate-200D, FortiGate-300C, FortiGate-600C and FortiGate-800C - Fortinet, Inc. - FIPS 140 2367 - historical

See all 21 in the Security Certifications Explorer.

References

http://osvdb.org/87048
http://www.kb.cert.org/vuls/id/111708(Third Party Advisory, US Government Resource)
http://www.securityfocus.com/bid/56382(Third Party Advisory, VDB Entry)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain