CVE-2015-1571

CVE-2015-1571 describes a potential vulnerability in Fortinet FortiOS 5.0 Patch 7 build 4457 related to its CAPWAP DTLS protocol implementation. Initially, it was believed that the same certificate and private key were used across different customer installations, which could facilitate man-in-the-middle (MitM) attacks by spoofing SSL servers. However, Fortinet later clarified that the "Fortinet_Factory" certificate is unique to each device, making such MitM attacks impossible. The CVSS score is 4.3 (Medium), indicating a network attack vector, medium attack complexity, and a potential impact on integrity (partial). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.