CVE-2022-29055
18.10.2022, 15:15
A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenticated attacker to crash the sslvpn daemon via an HTTP GET request.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortiproxy | 1.2.6 ≤ 𝑥 < 1.2.13 |
| fortinet | fortiproxy | 2.0.0 ≤ 𝑥 < 2.0.10 |
| fortinet | fortiproxy | 7.0.0 ≤ 𝑥 < 7.0.7 |
| fortinet | fortiproxy | 7.2.0 |
| fortinet | fortios | 6.2.0 ≤ 𝑥 < 6.2.11 |
| fortinet | fortios | 6.4.0 ≤ 𝑥 < 6.4.10 |
| fortinet | fortios | 7.0.0 ≤ 𝑥 < 7.0.7 |
| fortinet | fortios | 7.2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration