Intrusion PreventionFortiNAC.Java.Untrusted.Object.Deserialization
Description
This indicates an attack attempt to exploit an Insecure Deserialization Vulnerability in FortiNAC.
The vulnerability is due to an error in the vulnerable application when handling a request with a crafted serialized object. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application.
Affected Products
FortiNAC version 9.4.0 through 9.4.2
FortiNAC version 9.2.0 through 9.2.7
FortiNAC version 9.1.0 through 9.1.9
FortiNAC all versions 8.8, 8.7, 8.6, 8.5, 8.3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Please upgrade to FortiNAC version 9.4.3 or above
Please upgrade to FortiNAC version 9.2.8 or above
Please upgrade to FortiNAC version 9.1.10 or above
Please upgrade to FortiNAC version 7.2.2 or above
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 53341 |
| Created | Jun 26, 2023 |
| Updated | Jul 11, 2023 |
| Risk |
|
| CVE ID | CVE-2023-33299 |
| Exploit Prediction Score | 0.28% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Other |