VULNERABILITY INTELLIGENCE

CVE-2023-33307

CVSS score6.5 MEDIUM
EPSS probability0.59%
CISA KEVNot currently listed
Published2023-06-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter.

Weakness classification

  • psirt@fortinet.com: CWE-476
  • nvd@nist.gov: CWE-476

Primary references