Paper/Archive/CVE-2022-42475

CVE-2022-42475

Fortinet FortiProxy — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

KEV · due 3 Jan ransomware use EPSS 99%public exploit SSVC act CVSS 9.3

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 In CISA KEV+3030.0 EPSS percentile 99.9.999 × 2020.0 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Affected

ProductAffectedFixed inSource

FortiProxy7.2.0 – 7.2.1–CNA

FortiProxy7.0.0 – 7.0.7–CNA

FortiProxy2.0.0 – 2.0.11–CNA

FortiProxy1.2.0 – 1.2.13–CNA

FortiProxy1.1.0 – 1.1.6–CNA

FortiProxy1.0.0 – 1.0.7–CNA

FortiOS7.2.0 – 7.2.2–CNA

FortiOS7.0.0 – 7.0.8–CNA

FortiOS6.4.0 – 6.4.10–CNA

FortiOS6.2.0 – 6.2.11–CNA

FortiOS6.0.0 – 6.0.15–CNA

FortiOS5.6.0 – 5.6.14–CNA

Scores by source

fortinet (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reffortiguard.com/psirt/FG-IR-22-398 refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475 kevcisa.gov/known-exploited-vulnerabilities-catalog