CVE-2023-33300

A improper neutralization of special elements used in a command 'command injection' in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server communication port...

CVE-2023-33300

A improper neutralization of special elements used in a command 'command injection' in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server communication port...

CVE-2023-33300

A improper neutralization of special elements used in a command 'command injection' in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server communication port...

CVE-2023-33300

FortiNAC suffers an improper neutralization of special elements in a command injection vulnerability affecting the tcp/5555 XML interface, enabling an unauthenticated attacker to copy local files from the device. Affected releases include FortiNAC 7.2.0–7.2.1 and 9.4.0–9.4.3; remediation is in Fo...

CVE-2023-33300

A improper neutralization of special elements used in a command 'command injection' in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server communication port...

New Fortinet's FortiNAC Vulnerability Exposes Networks to Code Execution Attacks

Fortinet has rolled out updates to address a critical security vulnerability impacting its FortiNAC network access control solution that could lead to the execution of arbitrary code. Tracked as CVE-2023-33299, the flaw is rated 9.6 out of 10 for severity on the CVSS scoring system. It has been...

CVE-2023-33300

creationtimestamp| type| source ---|---|--- 2023-06-22 12:39:06+00:00| published-proof-of-concept| https://t.me/purplemedved/50 2023-06-23 17:20:05+00:00| seen| https://t.me/truesecator/4536 2023-08-11 14:30:31+00:00| published-proof-of-concept| https://t.me/MrVGunz/811 2025-03-14 17:48:49+00:00|...