CVE-2023-22633

HIGH 7.5CVE-2023-22633 · Published 13/06/2023 · updated 17/06/2026

In short

CVE-2023-22633 is a HIGH (CVSS 7.5) vulnerability affecting fortinac (fortinet), fortinac-f (fortinet).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
fortinac fortinet	`= 9.4.0= 9.4.1≥ 8.7.0, ≤ 8.7.6≥ 8.8.0, ≤ 8.8.11≥ 9.1.0, ≤ 9.1.8≥ 9.2.0, ≤ 9.2.6`	No fix yet
fortinac-f fortinet	`= 7.2.0`	No fix yet

Description

An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions 8.7.0 all versions may allow an unauthenticated attacker to perform a DoS attack on the device via client-secure renegotiation.

References

fortiguard.com/psirt/FG-IR-22-521 · Vendor Advisory

More vulnerabilities in fortinac

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fortinac

fortinet

= 9.4.0= 9.4.1≥ 8.7.0, ≤ 8.7.6≥ 8.8.0, ≤ 8.8.11≥ 9.1.0, ≤ 9.1.8≥ 9.2.0, ≤ 9.2.6

No fix yet

fortinac-f

fortinet

= 7.2.0

No fix yet

Description

More vulnerabilities in fortinac

See all →