CVE-2023-33306

A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@fortinet.com

Published

2023-06-16

Last modified

2024-10-22

Weaknesses

CWE-476

Affected products

• Fortios (Fortinet)
• Fortiproxy (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-23-015