CVE-2022-42475

Warnung

Medienbericht

Exploit

EPSS 99.47%
Veröffentlicht 02.01.2023 09:15:09
Zuletzt bearbeitet 24.10.2025 12:54:20
Quelle psirt@fortinet.com
CVE-Watchlists
Login
Unerledigt
Login

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier  and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Betroffene Produkte Warnungen 2 Metriken 3 CWE 2 Referenzen 7

NVD 19 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Fortinet ≫ FortiOS Version >= 5.0.0 <= 5.0.14

Fortinet ≫ FortiOS Version >= 5.2.0 <= 5.2.15

Fortinet ≫ FortiOS Version >= 5.4.0 <= 5.4.13

Fortinet ≫ FortiOS Version >= 5.6.0 <= 5.6.14

Fortinet ≫ FortiOS Version >= 6.0.0 < 6.0.16

Fortinet ≫ FortiOS Version >= 6.2.0 < 6.2.12

Fortinet ≫ FortiOS Version >= 6.4.0 < 6.4.11

Fortinet ≫ FortiOS Version >= 7.0.0 < 7.0.9

Fortinet ≫ FortiOS Version >= 7.2.0 < 7.2.3

Fortinet ≫ FortiProxy Version >= 1.0.0 <= 1.0.7

Fortinet ≫ FortiProxy Version >= 1.1.0 <= 1.1.6

Fortinet ≫ FortiProxy Version >= 1.2.0 <= 1.2.13

Fortinet ≫ FortiProxy Version >= 2.0.0 < 2.0.12

Fortinet ≫ FortiProxy Version >= 7.0.0 < 7.0.8

Fortinet ≫ FortiProxy Version >= 7.2.0 < 7.2.2

Fortinet ≫ FortiOS Version >= 6.0.0 < 6.0.15

   Fortinet ≫ Fim-7901e Version-
   Fortinet ≫ Fim-7904e Version-
   Fortinet ≫ Fim-7910e Version-
   Fortinet ≫ Fim-7920e Version-
   Fortinet ≫ Fim-7921f Version-
   Fortinet ≫ Fim-7941f Version-
   Fortinet ≫ Fortigate-6300f Version-
   Fortinet ≫ Fortigate-6300f-dc Version-
   Fortinet ≫ Fortigate-6500f Version-
   Fortinet ≫ Fortigate-6500f-dc Version-
   Fortinet ≫ Fortigate-6501f Version-
   Fortinet ≫ Fortigate-6501f-dc Version-
   Fortinet ≫ Fortigate-6601f Version-
   Fortinet ≫ Fortigate-6601f-dc Version-
   Fortinet ≫ Fortigate-7030e Version-
   Fortinet ≫ Fortigate-7040e Version-
   Fortinet ≫ Fortigate-7060e Version-
   Fortinet ≫ Fortigate-7121f Version-
   Fortinet ≫ Fpm-7620e Version-
   Fortinet ≫ Fpm-7620f Version-
   Fortinet ≫ Fpm-7630e Version-

Fortinet ≫ FortiOS Version >= 6.2.0 < 6.2.12

Fortinet ≫ FortiOS Version >= 6.4.0 < 6.4.10

Fortinet ≫ FortiOS Version >= 7.0.0 < 7.0.8

13.12.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

Schwachstelle

Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

12.12.2022:

https://www.cert.at/de/warnungen/2022/12/kritische-sicherheitslucke-in-fortinet-fortios

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	99.47%	0.999

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
psirt@fortinet.com	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-197 Numeric Truncation Error

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

17.03.2026 22:20

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

09.08.2025 11:36

https://fortiguard.com/psirt/FG-IR-22-398

Vendor Advisory

Exploit

Mitigation

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2022-42475

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-42475

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-42475

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-42475

13.12.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

12.12.2022: