Vulnerability Database

296,480

Total vulnerabilities in the database

CVE-2023-37936

A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via crafted requests.

  • Published: Jan 14, 2025
  • Updated: May 4, 2025
  • CVE: CVE-2023-37936
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
fortinet / fortiswitch 7.4.0 7.4.0.x
fortinet / fortiswitch 7.2.0 7.2.6
fortinet / fortiswitch 7.0.0 7.0.8
fortinet / fortiswitch 6.4.0 6.4.14
fortinet / fortiswitch 6.0.0 6.2.8