FortiOS - Fortilink lack of certificate validation

An improper certificate validation vulnerability [CWE-295] in FortiOS may allow an unauthenticated attacker in a Man-in-the-Middle position to decipher and alter the FortiLink communication channel between the FortiOS device and a FortiSwitch instance.

attacker certificate channel communication cwe device fortios instance man-in-the-middle may unauthenticated validation vulnerability