What is CVE-2023-41675?

CVE-2023-41675 is a medium-severity vulnerability in Fortinet Fortios, classified under Use After Free. CVSS score: 5.3/10. Published 2023-10-10.

How severe is CVE-2023-41675?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Use After Free in Fortinet Fortios

CVE-2023-41675

A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 through 7.0.8 may allow an unauthenticated remote attacker to crash the WAD process via multiple crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection.

Vulnerability class: Use-After-Free

EPSS: 0.010 (59.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Fortinet Fortios — versions 7.2.0, 7.0.0
Fortinet Fortiproxy — versions 7.0.0, 7.2.1, 7.2.0

Weakness classification (CWE)

CWE-416 — Use After Free

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-41675?: CVE-2023-41675 is a medium-severity vulnerability in Fortinet Fortios, classified under Use After Free. CVSS score: 5.3/10. Published 2023-10-10.
How severe is CVE-2023-41675?: Medium severity. CVSS v3 base score is 5.3 out of 10.