CVE-2023-33306CWE-476

A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to…

Medium · published June 16, 2023

CVSS v3.1
6.2
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:X
CVSS v4.0
Not supplied
EPSS
0.00839 · 57.4th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2023-06-16T09:40Z
EPSS history
Timeline
  • 16 JUN 09:40Z
    A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to…
    cvelistv5