CVEvulnerability

CVE-2023-40718

7.5 HIGH Published 2023-10-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-436

Description

A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via crafted TCP packets.

Affected configurations

• fortinet fortios ips engine (<= 7.312) • fortinet fortios ips engine (<= 7.165) • fortinet fortios ips engine (<= 6.158)

Related

Weakness · CWE (1)

  • CWE-436 Interpretation Conflict weakness

References