Lucene search

FortinetCVE-2023-33303

HistoryOct 13, 2023 - 3:15 p.m.

CVE-2023-33303

2023-10-1315:15:43

CWE-613

fortinet

web.nvd.nist.gov

cve-2023-33303

insufficient session expiration

fortinet fortiedr

unauthorized code execution

api request

nvd

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

A insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows attacker to execute unauthorized code or commands via api request

Affected configurations

Nvd

Node

fortinetfortiedrRange5.0.0–5.0.1

VendorProductVersionCPE
fortinetfortiedr*cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fortinet	fortiedr	*	cpe:2.3:a:fortinet:fortiedr::::::::

CNA Affected

[
  {
    "vendor": "Fortinet",
    "product": "FortiEDR",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "5.0.0",
        "lessThanOrEqual": "5.0.1",
        "status": "affected"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-23-007

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

Related for CVE-2023-33303