CVE-2023-40721
11.02.2025, 17:15
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or commands via specially crafted requests.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortios | 6.2.0 ≤ 𝑥 < 7.0.14 |
| fortinet | fortios | 7.2.0 ≤ 𝑥 < 7.2.7 |
| fortinet | fortios | 7.4.0 |
| fortinet | fortiswitchmanager | 7.0.0 ≤ 𝑥 < 7.0.3 |
| fortinet | fortiswitchmanager | 7.2.0 ≤ 𝑥 < 7.2.3 |
| fortinet | fortiproxy | 1.2.0 ≤ 𝑥 < 7.0.15 |
| fortinet | fortiproxy | 7.2.0 ≤ 𝑥 < 7.2.8 |
| fortinet | fortiproxy | 7.4.0 |
| fortinet | fortipam | 1.0.0 ≤ 𝑥 < 1.2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration