CVE-2023-22640

03.05.2023, 22:15

A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.11, FortiOS version 6.2.0 through 6.2.13, FortiOS all versions 6.0,  FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7, FortiProxy all versions 2.0, FortiProxy all versions 1.2, FortiProxy all versions 1.1, FortiProxy all versions 1.0 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	HIGH	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
fortinet	CNA	7.1 HIGH	NETWORK	HIGH	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 57%

Vendor	Product	Version
fortinet	fortiproxy	1.0.0
fortinet	fortiproxy	1.1.0
fortinet	fortiproxy	1.2.0
fortinet	fortiproxy	2.0.0
fortinet	fortios	6.0.0 ≤ 𝑥 ≤ 6.0.16
fortinet	fortios	6.2.0 ≤ 𝑥 < 6.2.14
fortinet	fortios	6.4.0 ≤ 𝑥 < 6.4.12
fortinet	fortios	7.0.0 ≤ 𝑥 < 7.0.11
fortinet	fortios	7.2.0 ≤ 𝑥 < 7.2.4

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-787 - Out-of-bounds Write
The software writes data past the end, or before the beginning, of the intended buffer.

References

https://fortiguard.com/psirt/FG-IR-22-475