VDB

CVE-2023-23775

CVE-2023-23775 PUBLISHED CVSS 8.5 HIGH

A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted CLI commands.

EPSS 0.83% · 56.8th percentile

Risk Scores

CVSS 4.0
8.5
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.83%
56.8th percentile

Affected Products

VendorProductVersions
fortinetfortisoar7.0.0, 7.0.0, 7.0.0
FortinetFortiSOAR7.2.0, 7.0.0
FortinetFortiOS6.4.6, 7.4.0, 7.0.0
fortinetfortios7.4.0, 6.2.9, 6.4.6

Timeline

  • Jun 11, 2024 CVE Published
  • Jun 12, 2024 EPSS Score
  • Jul 6, 2024 EPSS Score
  • Jul 30, 2024 EPSS Score
  • Aug 2, 2024 CVE Updated
  • Aug 22, 2024 EPSS Score
  • Sep 15, 2024 EPSS Score
  • Oct 9, 2024 EPSS Score
  • Nov 2, 2024 EPSS Score
  • Nov 26, 2024 EPSS Score
  • Dec 20, 2024 EPSS Score
  • Jan 13, 2025 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›