{"id":"CVE-2023-36639","state":"PUBLISHED","title":"A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7","description":"A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiPAM versions 1.0.0 through 1.0.3 allows attacker to execute unauthorized code or commands  via specially crafted API requests.","publishedAt":"2023-12-13T06:42:44.194Z","updatedAt":"2024-08-02T16:52:54.282Z","severity":{"score":7,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C","source":"fortinet"},"assigner":"fortinet","products":["Fortinet FortiOS","Fortinet FortiPAM","Fortinet FortiProxy"],"affected":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.4","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.11","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.12","versionType":"semver"},{"version":"6.2.0","status":"affected","lessThanOrEqual":"6.2.15","versionType":"semver"},{"version":"6.0.0","status":"affected","lessThanOrEqual":"6.0.17","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","versions":[{"version":"1.1.0","status":"affected"},{"version":"1.0.0","status":"affected","lessThanOrEqual":"1.0.3","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.4","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.10","versionType":"semver"}]}],"references":["https://fortiguard.com/psirt/FG-IR-23-138"],"weaknesses":["CWE-134"],"ingestedAt":"2026-10-29T20:06:08.715Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/36xxx/CVE-2023-36639.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-36639","state":"PUBLISHED","datePublished":"2023-12-13T06:42:44.194Z","dateUpdated":"2024-08-02T16:52:54.282Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2023-06-25T18:03:39.227Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiPAM versions 1.0.0 through 1.0.3 allows attacker to execute unauthorized code or commands  via specially crafted API requests."}],"affected":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.4","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.11","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.12","versionType":"semver"},{"version":"6.2.0","status":"affected","lessThanOrEqual":"6.2.15","versionType":"semver"},{"version":"6.0.0","status":"affected","lessThanOrEqual":"6.0.17","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","versions":[{"version":"1.1.0","status":"affected"},{"version":"1.0.0","status":"affected","lessThanOrEqual":"1.0.3","versionType":"semver"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.4","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.10","versionType":"semver"}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-138","name":"https://fortiguard.com/psirt/FG-IR-23-138"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-134","lang":"en","description":"Execute unauthorized code or commands","type":"CWE"}]}],"providerMetadata":{"shortName":"fortinet","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateUpdated":"2023-12-13T06:42:44.194Z"},"solutions":[{"lang":"en","value":"Please upgrade to FortiOS version 7.4.1 or above \nPlease upgrade to FortiOS version 7.2.5 or above \nPlease upgrade to FortiOS version 7.0.12 or above \nPlease upgrade to FortiOS version 6.4.13 or above \nPlease upgrade to FortiOS version 6.2.16 or above \nPlease upgrade to FortiPAM version 1.2.0 or above \nPlease upgrade to FortiPAM version 1.1.1 or above \nPlease upgrade to FortiProxy version 7.4.0 or above \nPlease upgrade to FortiProxy version 7.2.5 or above \nPlease upgrade to FortiProxy version 7.0.11 or above \nPlease upgrade to FortiSASE version 23.3 or above \n"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-138","name":"https://fortiguard.com/psirt/FG-IR-23-138","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T16:52:54.282Z"}}]}}}