CVE-2023-33306

State: Published
Severity: 6.2 Medium
Published: Jun 16, 2023
Updated: Oct 22, 2024
Reserved: May 22, 2023

Description

A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter.

Scores

CVSS	Score	Vector	Source
3.1	6.2 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:X	fortinet

Weaknesses

CWE-476 Denial of service

Affected Products

Product	Versions
FortiOSFortinet	7.2.0 through 7.2.4Affected 7.0.0 through 7.0.10Affected 6.4.0 through 6.4.12Affected
FortiProxyFortinet	7.2.0 through 7.2.3Affected 7.0.0 through 7.0.9Affected

References

https://fortiguard.com/psirt/FG-IR-23-015

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.