Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2023-28002

An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.12, 6.4 all versions, 6.2 all versions, 6.0 all versions a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.12, 6.4 all versions, 6.2 all versions, 6.0 all versions and VMs may allow a local attacker with admin privileges to boot a malicious image on the device and bypass the filesystem integrity check in place.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiOS

Default version status: unaffected

  • 7.2.0 to ≤ 7.2.3affected
  • 7.0.0 to ≤ 7.0.12affected
  • 6.4.0 to ≤ 6.4.15affected
  • 6.2.0 to ≤ 6.2.16affected
  • 6.0.0 to ≤ 6.0.18affected

Fortinet FortiProxy

Default version status: unaffected

  • 7.4.0 to ≤ 7.4.1affected
  • 7.2.0 to ≤ 7.2.8affected
  • 7.0.0 to ≤ 7.0.19affected
  • 2.0.0 to ≤ 2.0.14affected

References