Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-22640

A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS 6.0.0

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiOS

Default version status: unaffected

  • 7.2.0 to ≤ 7.2.3affected
  • 7.0.0 to ≤ 7.0.10affected
  • 6.4.0 to ≤ 6.4.11affected
  • 6.2.0 to ≤ 6.2.13affected
  • 6.0.0 to ≤ 6.0.16affected

Fortinet FortiProxy

Default version status: unaffected

  • 7.2.0 to ≤ 7.2.1affected
  • 7.0.0 to ≤ 7.0.7affected
  • 2.0.0 to ≤ 2.0.14affected
  • 1.2.1 to ≤ 1.2.13affected
  • 01.02.00affected
  • 1.1.4 to ≤ 1.1.6affected
  • 01.01.00 to ≤ 01.01.03affected
  • 01.00.00 to ≤ 01.00.07affected

References