CVE-2023-42790

Published: Mar 12, 2024Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

A stack-based buffer overflow in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

Affected (9)

Products: Fortinet: Fortios, Fortiproxy

Fortinet

2 products

Fortios

Fortiproxy

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	From 6.2.0 to 6.2.15
Fortinet Fortios	From 6.4.0 to 6.4.14
Fortinet Fortios	From 7.0.0 to 7.0.12
Fortinet Fortios	From 7.2.0 to 7.2.5
Fortinet Fortios	From 7.4.0 to 7.4.1
Fortinet Fortiproxy	From 2.0.0 to 2.0.13
Fortinet Fortiproxy	From 7.0.0 to 7.0.12
Fortinet Fortiproxy	From 7.2.0 to 7.2.6
Fortinet Fortiproxy	Version 7.4.0

Related CWEs

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (2)

https://fortiguard.com/psirt/FG-IR-23-328

Source: psirt@fortinet.com

https://fortiguard.com/psirt/FG-IR-23-328

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.