CVE-2023-33306
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11, and before 6.4.13, and in FortiProxy before 7.2.4 and before 7.0.10 allows an attacker to cause denial of service for sslvpn via a specifically crafted request in the bookmark parameter.
Risk Assessment
This vulnerability may lead to denial of service (DoS) for users relying on sslvpn, potentially affecting the availability of services within the organization.
Recommendation
It is recommended to update FortiOS and FortiProxy to the latest versions to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter.