CVE-2023-33307

Name of the Vulnerable Software and Affected Versions FortiOS versions prior to 7.2.5 FortiOS versions prior to 7.0.11 FortiProxy versions prior to 7.2.3 FortiProxy versions prior to 7.0.9

Description The issue is related to a null pointer dereference, which can be exploited by an attacker to cause a denial of service in the SSL-VPN service. This can be achieved by sending a specifically crafted request in the network parameter. The vulnerability can be exploited remotely.

Recommendations For FortiOS versions prior to 7.2.5, update to version 7.2.5 or later. For FortiOS versions prior to 7.0.11, update to version 7.0.11 or later. For FortiProxy versions prior to 7.2.3, update to version 7.2.3 or later. For FortiProxy versions prior to 7.0.9, update to version 7.0.9 or later. As a temporary workaround, consider restricting access to the SSL-VPN service until a patch is available.