CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. It affects FortiOS. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2023-48785
Severity
MEDIUM
CVSS
4.8
EPSS
0.16%
FortiOS
Original NVD Description
An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F.
Related CVEs
Other vulnerabilities affecting the same vendor(s)