vulnerability

Fortinet FortiOS: Unspecified Security Vulnerability (CVE-2023-46717)

Severity
9
CVSS
(AV:N/AC:M/Au:S/C:C/I:C/A:C)
Published
Mar 12, 2024
Added
Mar 25, 2024
Modified
Aug 11, 2025

Description

An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA may allow a readonly user to gain read-write access via successive login attempts.

Solutions

fortios-upgrade-7_0_13fortios-upgrade-7_2_7fortios-upgrade-7_4_2
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.