CVE-2023-46715

An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and version 7.2.6 and below allows an authenticated IPSec VPN user with dynamic IP addressing to send (but not receive) packets spoofing the IP of another user via crafted network packets.

An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and version 7.2.6 and below allows an authenticated IPSec VPN user with dynamic IP addressing to send (but not receive) packets spoofing the IP of another user via crafted network packets.

Una vulnerabilidad de error de validación de origen [CWE-346] en Fortinet FortiOS IPSec VPN versión 7.4.0 a 7.4.1 y versión 7.2.6 y anteriores permite que un usuario de IPSec VPN autenticado con dirección IP dinámica envíe (pero no reciba) paquetes que falsifican la IP de otro usuario a través de paquetes de red manipulados.