by Kastro
Paper/Archive/CVE-2023-42789

CVE-2023-42789

Fortinet FortiProxy — A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, F…

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 88.5.885 × 2017.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0.0 through 7.0.12, FortiProxy 2.0.0 through 2.0.13, FortiSASE 23.2.b allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

Affected

ProductAffectedFixed inSource
FortiProxy7.4.0–CNA
FortiProxy7.2.0 – 7.2.6–CNA
FortiProxy7.0.0 – 7.0.12–CNA
FortiProxy2.0.0 – 2.0.13–CNA
FortiSASE23.2.b–CNA
FortiOS7.4.0 – 7.4.1–CNA
FortiOS7.2.0 – 7.2.5–CNA
FortiOS7.0.0 – 7.0.12–CNA
FortiOS6.4.0 – 6.4.14–CNA
FortiOS6.2.0 – 6.2.15–CNA
fortios7.4.0 – 7.4.1–CISA-ADP
fortios7.2.0 – 7.2.5–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
fortinet (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reffortiguard.com/psirt/FG-IR-23-328