CVE-2023-44252: High severity fortinet fortiwan vulnerability

Published Dec 13, 2023

Updated

UNSUPPORTED WHEN ASSIGNED An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with crafted JWT token values.

Affected Software

4 affected components

Fortinet FortiWan=5.1.1

Fortinet FortiWan=5.1.2

Fortinet FortiWan=5.2.0

Fortinet FortiWan=5.2.1

Remediation

Information

This product is end of life and no longer supported. Please consider replacing with an equivalent FortiGate appliance as approriate.

Event History

Dec 13, 2023

CVE Published

08:52 AM

Data Sourced

08:52 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-44252?

CVE-2023-44252 is classified as an improper authentication vulnerability that could potentially lead to privilege escalation.

How do I fix CVE-2023-44252?

To mitigate the effects of CVE-2023-44252, it is essential to upgrade to a patched version of Fortinet FortiWAN that addresses the vulnerability.

Which versions of Fortinet FortiWAN are affected by CVE-2023-44252?

CVE-2023-44252 affects Fortinet FortiWAN versions 5.1.1, 5.1.2, 5.2.0, and 5.2.1.

Can CVE-2023-44252 be exploited remotely?

Yes, CVE-2023-44252 can be exploited by an authenticated attacker via crafted HTTP or HTTPS requests.

What is the impact of CVE-2023-44252 on Fortinet FortiWAN users?

The impact of CVE-2023-44252 allows an authenticated attacker to escalate privileges, potentially compromising the FortiWAN system's security.