CVE-2023-33302

Summary

CVE-2023-33302 is a buffer overflow vulnerability affecting Fortinet's FortiMail webmail and administrative interfaces in versions 6.4.0 through 6.4.4 and before 6.2.6, as well as FortiNDR administrative interfaces in versions 7.2.0 and before 7.1.0. An authenticated attacker with regular webmail access can exploit this flaw by sending specifically crafted HTTP requests. This vulnerability allows the attacker to trigger a buffer overflow, potentially leading to the unauthorized execution of code or commands. This issue poses a significant risk to Fortinet users and requires immediate attention for patching and mitigation efforts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.