CVE-2023-48785
4.8MEDIUMAn improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS comm
Published: 3/14/2025Updated: 7/25/2025
Description
An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.
AI AnalysisPowered by AI
Affected Products
fortinetfortinac-f
References
- https://fortiguard.com/psirt/FG-IR-23-288Vendor Advisory