CVE-2023-41675

5.3 mediumEPSS 1.4%

Medium (5.3) in fortinet. EPSS 1.4% chance of exploitation in the next 30 days.

A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 through 7.0.8 may allow an unauthenticated remote attacker to crash the WAD process via multiple crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2023-10-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios
fortinet:fortiproxy

References

https://fortiguard.com/psirt/FG-IR-23-184
https://fortiguard.com/psirt/FG-IR-23-184

Check your stack JSON