Vulnerabilities > CVE-2022-42475 - Out-of-bounds Write vulnerability in Fortinet Fortios

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

fortinet

CWE-787

critical

NVD

Published: 2023-01-02

Updated: 2024-06-28

Summary

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Vulnerable Configurations

Part	Description	Count
OS	Fortinet Fortinet Fortios 5.6.0 Fortinet Fortios 5.6.1 Fortinet Fortios 5.6.2 Fortinet Fortios 5.6.3 Fortinet Fortios 5.6.4 Fortinet Fortios 5.6.5 Fortinet Fortios 5.6.6 Fortinet Fortios 5.6.7 Fortinet Fortios 5.6.8 Fortinet Fortios 5.6.9 Fortinet Fortios 5.6.10 Fortinet Fortios 5.6.11 Fortinet Fortios 5.6.12 Fortinet Fortios 5.6.13 Fortinet Fortios 5.6.14 Fortinet Fortios 5.4.0 Fortinet Fortios 5.4.1 Fortinet Fortios 5.4.2 Fortinet Fortios 5.4.3 Fortinet Fortios 5.4.4 Fortinet Fortios 5.4.5 Fortinet Fortios 5.4.6 Fortinet Fortios 5.4.7 Fortinet Fortios 5.4.8 Fortinet Fortios 5.4.9 Fortinet Fortios 5.4.10 Fortinet Fortios 5.4.11 Fortinet Fortios 5.4.12 Fortinet Fortios 5.4.13 Fortinet Fortios 5.2.0 Fortinet Fortios 5.2.1 Fortinet Fortios 5.2.2 Fortinet Fortios 5.2.3 Fortinet Fortios 5.2.4 Fortinet Fortios 5.2.5 Fortinet Fortios 5.2.6 Fortinet Fortios 5.2.7 Fortinet Fortios 5.2.8 Fortinet Fortios 5.2.9 Fortinet Fortios 5.2.10 Fortinet Fortios 5.2.11 Fortinet Fortios 5.2.12 Fortinet Fortios 5.2.13 Fortinet Fortios 5.2.14 Fortinet Fortios 5.2.15 Fortinet Fortios 5.0.0 Fortinet Fortios 5.0.1 Fortinet Fortios 5.0.2 Fortinet Fortios 5.0.3 Fortinet Fortios 5.0.4 Fortinet Fortios 5.0.5 Fortinet Fortios 5.0.6 Fortinet Fortios 5.0.7 Fortinet Fortios 5.0.8 Fortinet Fortios 5.0.9 Fortinet Fortios 5.0.10 Fortinet Fortios 5.0.11 Fortinet Fortios 5.0.12 Fortinet Fortios 5.0.13 Fortinet Fortios 5.0.14 Fortinet Fortios 6.0.0 Fortinet Fortios 6.0.1 Fortinet Fortios 6.0.2 Fortinet Fortios 6.0.3 Fortinet Fortios 6.0.4 Fortinet Fortios 6.0.5 Fortinet Fortios 6.0.6 Fortinet Fortios 6.0.7 Fortinet Fortios 6.0.8 Fortinet Fortios 6.0.9 Fortinet Fortios 6.0.10 Fortinet Fortios 6.0.11 Fortinet Fortios 6.0.12 Fortinet Fortios 6.0.13 Fortinet Fortios 6.0.14 Fortinet Fortios 6.0.15 Fortinet Fortios 6.2.0 Fortinet Fortios 6.2.1 Fortinet Fortios 6.2.2 Fortinet Fortios 6.2.3 Fortinet Fortios 6.2.4 Fortinet Fortios 6.2.5 Fortinet Fortios 6.2.6 Fortinet Fortios 6.2.7 Fortinet Fortios 6.2.8 Fortinet Fortios 6.2.9 Fortinet Fortios 6.2.10 Fortinet Fortios 6.2.11 Fortinet Fortios 6.4.0 Fortinet Fortios 6.4.1 Fortinet Fortios 6.4.2 Fortinet Fortios 6.4.3 Fortinet Fortios 6.4.4 Fortinet Fortios 6.4.5 Fortinet Fortios 6.4.6 Fortinet Fortios 6.4.7 Fortinet Fortios 6.4.8 Fortinet Fortios 6.4.9 Fortinet Fortios 6.4.10 Fortinet Fortios 7.0.0 Fortinet Fortios 7.0.1 Fortinet Fortios 7.0.2 Fortinet Fortios 7.0.3 Fortinet Fortios 7.0.4 Fortinet Fortios 7.0.5 Fortinet Fortios 7.0.6 Fortinet Fortios 7.0.7 Fortinet Fortios 7.0.8 Fortinet Fortios 7.0.9 Fortinet Fortios 7.2.0 Fortinet Fortios 7.2.1 Fortinet Fortios 7.2.2	112
Application	Fortinet Fortinet Fortiproxy 1.0.0 Fortinet Fortiproxy 1.0.1 Fortinet Fortiproxy 1.0.2 Fortinet Fortiproxy 1.0.3 Fortinet Fortiproxy 1.0.4 Fortinet Fortiproxy 1.0.5 Fortinet Fortiproxy 1.0.6 Fortinet Fortiproxy 1.0.7 Fortinet Fortiproxy 1.1.0 Fortinet Fortiproxy 1.1.1 Fortinet Fortiproxy 1.1.2 Fortinet Fortiproxy 1.1.3 Fortinet Fortiproxy 1.1.4 Fortinet Fortiproxy 1.1.5 Fortinet Fortiproxy 1.1.6 Fortinet Fortiproxy 1.2.0 Fortinet Fortiproxy 1.2.1 Fortinet Fortiproxy 1.2.2 Fortinet Fortiproxy 1.2.3 Fortinet Fortiproxy 1.2.4 Fortinet Fortiproxy 1.2.5 Fortinet Fortiproxy 1.2.6 Fortinet Fortiproxy 1.2.7 Fortinet Fortiproxy 1.2.8 Fortinet Fortiproxy 1.2.9 Fortinet Fortiproxy 1.2.10 Fortinet Fortiproxy 1.2.11 Fortinet Fortiproxy 1.2.12 Fortinet Fortiproxy 1.2.13 Fortinet Fortiproxy 2.0.0 Fortinet Fortiproxy 2.0.1 Fortinet Fortiproxy 2.0.2 Fortinet Fortiproxy 2.0.3 Fortinet Fortiproxy 2.0.4 Fortinet Fortiproxy 2.0.5 Fortinet Fortiproxy 2.0.6 Fortinet Fortiproxy 2.0.7 Fortinet Fortiproxy 2.0.8 Fortinet Fortiproxy 2.0.9 Fortinet Fortiproxy 2.0.10 Fortinet Fortiproxy 7.2.0 Fortinet Fortiproxy 7.2.1 Fortinet Fortiproxy 7.2.2 Fortinet Fortiproxy 7.0.0 Fortinet Fortiproxy 7.0.1 Fortinet Fortiproxy 7.0.2 Fortinet Fortiproxy 7.0.3 Fortinet Fortiproxy 7.0.4 Fortinet Fortiproxy 7.0.5 Fortinet Fortiproxy 7.0.6 Fortinet Fortiproxy 7.0.7 Fortinet Fortiproxy 7.0.8	52
Hardware	Fortinet Fortinet FIM 7901E - Fortinet FIM 7904E - Fortinet FIM 7910E - Fortinet FIM 7920E - Fortinet FIM 7921F - Fortinet FIM 7941F - Fortinet Fortigate 6300F - Fortinet Fortigate 6300F DC - Fortinet Fortigate 6500F - Fortinet Fortigate 6500F DC - Fortinet Fortigate 6501F - Fortinet Fortigate 6501F DC - Fortinet Fortigate 6601F - Fortinet Fortigate 6601F DC - Fortinet Fortigate 7030E - Fortinet Fortigate 7040E - Fortinet Fortigate 7060E - Fortinet Fortigate 7121F - Fortinet FPM 7620E - Fortinet FPM 7620F - Fortinet FPM 7630E -	21

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://fortiguard.com/psirt/FG-IR-22-398

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Related news

References