CVE-2023-33306

Fortinet / FortiOS PUBLISHED

Description (CNA)

A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiOS	affected 7.2.0 through 7.2.4; affected 7.0.0 through 7.0.10; affected 6.4.0 through 6.4.12
Fortinet / FortiProxy	affected 7.2.0 through 7.2.3; affected 7.0.0 through 7.0.9

CWE

CWE-476

References

https://fortiguard.com/psirt/FG-IR-23-015

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/psirt/FG-IR-23-015

CISA-ADP

No English description supplied.

No references supplied.