Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-33307

A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter.

Published

2023-06-16T10:15:09.523

Last Modified

2024-11-21T08:05:22.977

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Secondary
CWE-476
Type: Primary
CWE-476

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	fortinet	fortiproxy	≤ 7.0.9	Yes
Application	fortinet	fortiproxy	≤ 7.2.3	Yes
Operating System	fortinet	fortios	< 7.0.11	Yes
Operating System	fortinet	fortios	< 7.2.5	Yes

References

https://fortiguard.com/psirt/FG-IR-23-015 Not Applicable ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/258201 Third Party Advisory ([email protected])
https://fortiguard.com/psirt/FG-IR-23-015 Not Applicable (af854a3a-2127-422b-91ae-364da2661108)