VDB
CVE-2023-50179
CVE-2023-50179
PUBLISHED
CVSS 4.699999809265137 MEDIUM
An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN connectors.
EPSS 0.22% · 44.1th percentile
Risk Scores
CVSS v3.1
4.699999809265137
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:F/RL:U/RC:C
EPSS Score
0.22%
44.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| fortinet | fortiadc | 7.0.0, 7.0.0 |
| fortinet | fortiadc | 7.0.0, 7.2.0, 7.4.0 |
| Fortinet | FortiADC | 7.2.0, 7.0.0, 7.4.0 |
Timeline
- Jul 9, 2024 CVE Published
- Jul 9, 2024 PoC Published
- Jul 10, 2024 EPSS Score
- Aug 1, 2024 EPSS Score
- Aug 23, 2024 EPSS Score
- Sep 14, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 6, 2024 EPSS Score
- Oct 28, 2024 EPSS Score
- Nov 19, 2024 EPSS Score
- Nov 21, 2024 CVE Updated
- Dec 12, 2024 EPSS Score
References
- https://www.fortiguard.com/psirt/FG-IR-24-072 advisory
- https://www.fortiguard.com/psirt/FG-IR-23-469 advisory
- https://www.fortiguard.com/psirt/FG-IR-23-446 advisory
- https://www.fortiguard.com/psirt/FG-IR-24-073 advisory
- https://www.fortiguard.com/psirt/FG-IR-24-011 advisory
- https://www.fortiguard.com/psirt/FG-IR-24-070 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-326 advisory
- https://www.fortiguard.com/psirt/FG-IR-24-069 advisory
- https://www.fortiguard.com/psirt/FG-IR-23-485 advisory
- https://www.fortiguard.com/psirt/FG-IR-22-298 advisory
- https://www.fortiguard.com/psirt/FG-IR-23-459 advisory
- https://www.fortiguard.com/psirt/FG-IR-23-480 advisory
- https://fortiguard.fortinet.com/psirt/FG-IR-23-480 url
- https://nvd.nist.gov/vuln/detail/CVE-2023-50179 advisory