VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 13, 2023· Updated Jun 17, 2026

CVE-2023-22633

CVE-2023-22633

Description

An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions 8.7.0 all versions may allow an unauthenticated attacker to perform a DoS attack on the device via client-secure renegotiation.

Affected products

6
  • Fortinet/Fortinac F3 versions
    cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.2.0
    • (no CPE)range: 9.4.0
  • Fortinet/Fortinac3 versions
    cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*range: >=8.7.0,<=8.7.6
    • cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortinac:9.4.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.