CVE-2023-44252highCWE-287

CVE-2023-44252: high-severity vulnerability in Fortinet FortiWAN

Published · Updated

Follow this CVE+ Monitor Fortinet FortiWAN

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6epss 0.7%
** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with crafted JWT token values.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C
Affected products
Fortinet · FortiWAN
Related CVEs — Fortinet FortiWAN

In the same product, most dangerous first.

CVE-2021-26102CRITICALCVE-2021-26102EPSS 19.7%CVE-2022-33869HIGHCVE-2022-33869EPSS 1.3%CVE-2023-44251HIGHCVE-2023-44251EPSS 0.8%CVE-2021-26115HIGHCVE-2021-26115EPSS 0.8%