CVE-2023-47537
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Summary
CVE-2023-47537 is an improper certificate validation vulnerability that affects Fortinet FortiOS versions 7.0.0 - 7.0.13, 7.2.0 - 7.2.6, and 7.4.0 - 7.4.1. This vulnerability allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel between the FortiOS device and FortiSwitch. The risk score for this vulnerability is 29, indicating a medium severity level. The base severity score is 4.8, with low impacts on integrity and confidentiality, and no impact on availability. The exploitability score is 2.2, indicating a moderate likelihood of exploitation without requiring any privileges or user interaction. No remediation steps or potential dangers to organizations are mentioned in the provided information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions