Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortinac:7.2.1:*:*:*:*:*:*:*

part: a version: 7.2.1 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortinac (6d4e0d5b-e68c-5b76-8f77-7241b663f1be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-33299 vulnerable 2026-06-08 06:06:22.197305 Details available
CRITICAL (9.6)
A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute unauthorized code or commands via specifically crafted request on inter-server communication port. Note FortiNAC versions 8.x will not be fixed.
Published: 2023-06-23T07:46:37.499Z
Updated: 2024-10-23T14:25:53.423Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.