Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2023-37930

Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt me

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiProxy

Default version status: unaffected

  • 7.2.0 to ≤ 7.2.6affected
  • 7.0.0 to ≤ 7.0.12affected

Fortinet FortiOS

Default version status: unaffected

  • 7.4.0affected
  • 7.2.0 to ≤ 7.2.5affected
  • 7.0.1 to ≤ 7.0.11affected
  • 6.4.7 to ≤ 6.4.14affected

References