CVE-2023-37936

No fix known EPSS <1%CVSS 9.6

A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via crafted requests.

Published 2025-01-14 · CVE record · OSV

Products: Fortinet FortiSwitch