VULNERABILITY INTELLIGENCE
CVE-2023-33304
CVSS score4.4 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2023-11-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Description
A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials.
Weakness classification
- psirt@fortinet.com: CWE-798
Primary references
- psirt@fortinet.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory