VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Mar 14, 2025· Updated Jun 17, 2026

CVE-2023-48785

CVE-2023-48785

Description

An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.

Affected products

3
  • Fortinet/Fortinac F3 versions
    cpe:2.3:a:fortinet:fortinac-f:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortinac-f:*:*:*:*:*:*:*:*range: >=7.2.0,<7.2.5
    • (no CPE)range: <=7.2.4
    • (no CPE)range: 7.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.