CVE-2023-26203: High severity fortinet fortinac vulnerability

Q: What is the severity of CVE-2023-26203?

The severity of CVE-2023-26203 is high with a CVSS score of 7.8.

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-26203.

Q: What is the affected software for CVE-2023-26203?

The affected software for CVE-2023-26203 includes FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, and 8.7 all versions.

Q: What is the CWE ID for CVE-2023-26203?

The CWE ID for CVE-2023-26203 is CWE-798.

Q: Is there a fix available for CVE-2023-26203?

Yes, a fix is available for CVE-2023-26203. It is recommended to update to the latest version of FortiNAC or FortiNAC-F to mitigate the vulnerability.

Published May 3, 2023

Updated

A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an authenticated attacker to access to the database via shell commands.

Affected Software

3 affected components

Fortinet FortiNAC>=8.7.0<=9.2.7

Fortinet FortiNAC>=9.4.0<9.4.3

Fortinet FortiNAC-F=7.2.0

Remediation

Information

Please upgrade to FortiNAC version 9.4.3 or above Please upgrade to FortiNAC-F version 7.2.1 or above

Event History

May 3, 2023

CVE Published

via MITRE·09:27 PM

Data Sourced

via MITRE·09:27 PM

RemedyDescriptionSeverityWeakness

Data Sourced

10:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2023-26203?

The severity of CVE-2023-26203 is high with a CVSS score of 7.8.

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-26203.

What is the affected software for CVE-2023-26203?