How severe is CVE-2023-46715?

CVE-2023-46715 has a CVSS 3.x base score of 5.0, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability none.

Is CVE-2023-46715 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (56th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2023-46715?

CVE-2023-46715 affects Fortinet Fortios. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2023-46715?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2023-46715 have an EU (EUVD) identifier?

Yes. CVE-2023-46715 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-50899.

When was CVE-2023-46715 published?

CVE-2023-46715 was published on 2025-01-14 and last updated on 2026-06-17.

CVE-2023-46715

CVE-2023-46715 is a medium-severity vulnerability in Fortinet Fortios with a CVSS 3.x base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-346.

Key facts

Severity: Medium (CVSS 3.x base score 5.0)
EPSS exploit prediction: 1% (56th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2023-50899
Weakness: CWE-346
Affected product: Fortinet Fortios
Published: 2025-01-14
Last modified: 2026-06-17

Description

An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and version 7.2.6 and below allows an authenticated IPSec VPN user with dynamic IP addressing to send (but not receive) packets spoofing the IP of another user via crafted network packets.

Frequently asked questions

What is CVE-2023-46715?: An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and version 7.2.6 and below allows an authenticated IPSec VPN user with dynamic IP addressing to send (but not receive) packets spoofing the IP of another user via crafted network packets.
How severe is CVE-2023-46715?: CVE-2023-46715 has a CVSS 3.x base score of 5.0, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability none.
Is CVE-2023-46715 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (56th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2023-46715?: CVE-2023-46715 affects Fortinet Fortios. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2023-46715?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2023-46715 have an EU (EUVD) identifier?: Yes. CVE-2023-46715 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-50899.
When was CVE-2023-46715 published?: CVE-2023-46715 was published on 2025-01-14 and last updated on 2026-06-17.

References

https://fortiguard.com/psirt/FG-IR-23-407

Affected products (1)

cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

More vulnerabilities in Fortinet Fortios

CVE-2005-3057 — Critical (CVSS 10.0): The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote…
CVE-2026-24858 — Critical (CVSS 9.8): An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet…
CVE-2025-59718 — Critical (CVSS 9.8): A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0…
CVE-2025-22252 — Critical (CVSS 9.8): A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager…
CVE-2023-25610 — Critical (CVSS 9.8): A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version…
CVE-2024-55591 — Critical (CVSS 9.8): An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0…

All CVEs affecting Fortinet Fortios →

Other CWE-346 vulnerabilities

CVE-2026-42901 — Critical (CVSS 10.0): Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-6508 — Critical (CVSS 9.8): Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows…
CVE-2026-2790 — Critical (CVSS 9.8): Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR…
CVE-2022-50925 — Critical (CVSS 9.8): Prowise Reflect version 1.0.9 contains a remote keystroke injection vulnerability that allows attackers to send…
CVE-2025-30466 — Critical (CVSS 9.8): This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS…
CVE-2024-8487 — Critical (CVSS 9.8): A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS…

Browse all CWE-346 vulnerabilities →