CVE-2023-33300
Medium · 5.3CVSS
5.3
EPSS
14.1%
Published
Mar 14, 2025
CISA due date
—
The record
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server communication port.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|