CVE-2023-33307CWE-476

A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn…

Medium · published June 16, 2023

CVSS v3.1
6.4
EPSS
1%
Percentile
47.6
In the wild
Unconfirmed
What it is

A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:F/RL:X/RC:C
CVSS v4.0
Not supplied
EPSS
0.00592 · 47.6th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2023-06-16T09:40Z
EPSS history
Timeline
  • 16 JUN 09:40Z
    A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn…
    cvelistv5