Vulnerabilities > CVE-2023-42790 - Stack-based Buffer Overflow vulnerability in Fortinet Fortios and Fortiproxy

CVSS 8.1 - HIGH

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

high complexity

fortinet

CWE-121

NVD

Published: 2024-03-12

Updated: 2024-03-19

Summary

A stack-based buffer overflow in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

Vulnerable Configurations

Part	Description	Count
OS	Fortinet Fortinet Fortios 6.2.0 Fortinet Fortios 6.2.1 Fortinet Fortios 6.2.2 Fortinet Fortios 6.2.3 Fortinet Fortios 6.2.4 Fortinet Fortios 6.2.5 Fortinet Fortios 6.2.6 Fortinet Fortios 6.2.7 Fortinet Fortios 6.2.8 Fortinet Fortios 6.2.9 Fortinet Fortios 6.2.10 Fortinet Fortios 6.2.11 Fortinet Fortios 6.2.12 Fortinet Fortios 6.2.13 Fortinet Fortios 6.2.14 Fortinet Fortios 7.0.0 Fortinet Fortios 7.0.1 Fortinet Fortios 7.0.2 Fortinet Fortios 7.0.3 Fortinet Fortios 7.0.4 Fortinet Fortios 7.0.5 Fortinet Fortios 7.0.6 Fortinet Fortios 7.0.7 Fortinet Fortios 7.0.8 Fortinet Fortios 7.0.9 Fortinet Fortios 7.0.10 Fortinet Fortios 7.0.11 Fortinet Fortios 6.4.0 Fortinet Fortios 6.4.1 Fortinet Fortios 6.4.2 Fortinet Fortios 6.4.3 Fortinet Fortios 6.4.4 Fortinet Fortios 6.4.5 Fortinet Fortios 6.4.6 Fortinet Fortios 6.4.7 Fortinet Fortios 6.4.8 Fortinet Fortios 6.4.9 Fortinet Fortios 6.4.10 Fortinet Fortios 6.4.11 Fortinet Fortios 6.4.12 Fortinet Fortios 6.4.13 Fortinet Fortios 6.4.14 Fortinet Fortios 7.2.0 Fortinet Fortios 7.2.1 Fortinet Fortios 7.2.2 Fortinet Fortios 7.2.3 Fortinet Fortios 7.2.4 Fortinet Fortios 7.2.5 Fortinet Fortios 7.4.0 Fortinet Fortios 7.4.1	50
Application	Fortinet Fortinet Fortiproxy 2.0.0 Fortinet Fortiproxy 2.0.1 Fortinet Fortiproxy 2.0.2 Fortinet Fortiproxy 2.0.3 Fortinet Fortiproxy 2.0.4 Fortinet Fortiproxy 2.0.5 Fortinet Fortiproxy 2.0.6 Fortinet Fortiproxy 2.0.7 Fortinet Fortiproxy 2.0.8 Fortinet Fortiproxy 2.0.9 Fortinet Fortiproxy 2.0.10 Fortinet Fortiproxy 2.0.12 Fortinet Fortiproxy 7.4.0 Fortinet Fortiproxy 7.2.1 Fortinet Fortiproxy 7.2.2 Fortinet Fortiproxy 7.0.0 Fortinet Fortiproxy 7.0.1 Fortinet Fortiproxy 7.0.2 Fortinet Fortiproxy 7.0.3 Fortinet Fortiproxy 7.0.4 Fortinet Fortiproxy 7.0.5 Fortinet Fortiproxy 7.0.6 Fortinet Fortiproxy 7.0.7 Fortinet Fortiproxy 7.0.8 Fortinet Fortiproxy 7.0.9 Fortinet Fortiproxy 7.0.10 Fortinet Fortiproxy 7.0.11	27

Common Weakness Enumeration (CWE)

CWE-121 - Stack-based Buffer Overflow

References

https://fortiguard.com/psirt/FG-IR-23-328