CVE Catalog
CVE-2023-33307
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.59%
44th percentile - higher than 44% of all known CVEs
Summary
A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter.
Risk Assessment
This vulnerability may lead to a denial of service for the sslvpn, impacting the organization's operations and access to resources.
Recommendation
It is recommended to update FortiOS and FortiProxy to the latest versions to mitigate this vulnerability.
Original NVD description (English source)
A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter.