← Back

CVE-2023-29181

nvd nist
Published: Feb 22, 2024Modified: Oct 22, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiOS 5.6 all versions, FortiOS 5.4 all versions, FortiOS 5.2 all versions, FortiOS 5.0 all versions, FortiOS 4.3 all versions, FortiOS 4.2 all versions, FortiOS 4.1 all versions, FortiOS 4.0 all versions, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.4, FortiProxy 7.0.0 through 7.0.10, FortiProxy 2.0.0 through 2.0.12, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specially crafted command.

Affected (8)

3 products
Fortiproxy
Fortios
Fortipam
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
1.0.0 ≤ version < 2.0.13
7.0.0 ≤ version < 7.0.11
7.2.0 ≤ version < 7.2.5
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
6.0.0 ≤ version < 6.2.15
6.4.0 ≤ version < 6.4.13
7.0.0 ≤ version < 7.0.12
7.2.0 ≤ version < 7.2.5
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
1.0.0 ≤ version < 1.1.0

References (2)

Source: psirt@fortinet.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.