Unrated severityNVD Advisory· Published Mar 14, 2025· Updated Mar 14, 2025
CVE-2023-48785
CVE-2023-48785
Description
An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.
Affected products
2<=7.2.4+ 1 more
- (no CPE)range: <=7.2.4
- (no CPE)range: 7.2.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.