CVE-2023-36641

A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1, all  versions, FortiProxy 1.0 all versions, FortiOS version 7.4.0, FortiOS version 7.2.0 through 7.2.5, FortiOS version 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions allows attacker to denial of service via specifically crafted HTTP requests.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
fortinetCNA
6.2 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
VendorProductVersion
fortinetfortiproxy
1.0.0 ≤
𝑥
≤ 1.0.7
fortinetfortiproxy
1.1.0 ≤
𝑥
≤ 1.1.6
fortinetfortiproxy
1.2.0 ≤
𝑥
≤ 1.2.13
fortinetfortiproxy
2.0.0 ≤
𝑥
≤ 2.0.13
fortinetfortiproxy
7.0.0 ≤
𝑥
≤ 7.0.10
fortinetfortiproxy
7.2.0 ≤
𝑥
≤ 7.2.4
fortinetfortios
6.0.0 ≤
𝑥
≤ 6.0.17
fortinetfortios
6.2.0 ≤
𝑥
≤ 6.2.15
fortinetfortios
6.4.0 ≤
𝑥
≤ 6.4.14
fortinetfortios
7.0.0 ≤
𝑥
≤ 7.0.12
fortinetfortios
7.2.0 ≤
𝑥
≤ 7.2.5
𝑥
= Vulnerable software versions