CVE-2015-1452: Fortinet FortiOS

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5.0 Patch 7 build 4457 allows remote attackers to cause a denial of service (locked CAPWAP Access Controller) via a large number of ClientHello DTLS messages.

Affected products

• Fortinet FortiOS: version 5.0.7 only

Published 2015-02-02. Last modified 2026-06-17.