Vulnerability · Published Mar 14, 2025 · Assigned by fortinet
CVE-2023-33300
Medium 4.8
In plain English
A medium-severity command injection in FortiNAC from Fortinet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 14.1% (higher than 97% of all known vulnerabilities).
Severity (CVSS 3.1)4.8Medium
Exploit odds (30 days)14.1%top 3.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server communication port.
Affected products (as reported)
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R