8.1

CVE-2023-42790

A stack-based buffer overflow in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fortinet ≫ Fortiproxy Version >= 2.0.0 <= 2.0.13
Fortinet ≫ Fortiproxy Version >= 7.0.0 <= 7.0.12
Fortinet ≫ Fortiproxy Version >= 7.2.0 <= 7.2.6
Fortinet ≫ Fortiproxy Version7.4.0
Fortinet ≫ Fortios Version >= 6.2.0 <= 6.2.15
Fortinet ≫ Fortios Version >= 6.4.0 <= 6.4.14
Fortinet ≫ Fortios Version >= 7.0.0 <= 7.0.12
Fortinet ≫ Fortios Version >= 7.2.0 <= 7.2.5
Fortinet ≫ Fortios Version >= 7.4.0 <= 7.4.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.39
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
psirt@fortinet.com 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).