UpHeron
All vulnerabilities

Servers and applications

CVE-2023-33306

A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter.

Severity
Medium 6.5
Published
16 Jun 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.4.13, 7.0.10, 7.0.11, 7.2.4, 7.2.5
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiProxyServers and applications · cpe:a:fortinet:fortiproxy
  • From 7.0.0 before 7.0.10
  • From 7.2.0 before 7.2.4
Fortinet FortiOSServers and applications · cpe:o:fortinet:fortios
  • From 6.4.0 before 6.4.13
  • From 7.0.0 before 7.0.11
  • From 7.2.0 before 7.2.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-33306
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-33306