VULNERABILITY INTELLIGENCE

CVE-2023-33306

CVSS score6.5 MEDIUM
EPSS probability0.84%
CISA KEVNot currently listed
Published2023-06-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter.

Weakness classification

  • psirt@fortinet.com: CWE-476
  • nvd@nist.gov: CWE-476

Primary references