CVE-2023-47537

4.8 mediumEPSS 0.2%

Medium (4.8) in fortinet fortios. EPSS 0.2% chance of exploitation in the next 30 days.

An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4 all versions allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel between the FortiOS device and FortiSwitch.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2024-02-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios

References

https://fortiguard.com/psirt/FG-IR-23-301
https://fortiguard.com/psirt/FG-IR-23-301

Check your stack JSON