CVE-2023-47537: Fortinet FortiOS

Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4 all versions allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel between the FortiOS device and FortiSwitch.

Affected products

• Fortinet FortiOS: from 7.0.0, before 7.0.14 (fixed in 7.0.14); from 7.2.0, up to and including 7.2.6; version 7.4.0 only; version 7.4.1 only

Published 2024-02-15. Last modified 2026-06-17.