VDB
CVE-2023-27997
CVE-2023-27997
PUBLISHED
KEV
13. Juni 2023 Fortinet hat eine Warnung herausgegeben, dass in den SSL-VPN - Komponenten der Produkte FortiOS und FortiProxy eine kritische Sicherheitslücke besteht, die auch bereits aktiv ausgenutzt wird, und stellt erste entsprechende Updates bereit. CVE-Nummer(n): CVE-2023-27997 CVSSv3 Score: 9.2
EPSS 92.12% · 99.7th percentile
Risk Scores
EPSS Score
92.12%
99.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiOS 6.2.0 bis 6.2.13 | |
| Fortinet | FortiOS 6.0.0 bis 6.0.16 | |
| Fortinet | FortiOS-6K7K 6.0.10 | |
| Fortinet | FortiOS-6K7K 6.2.9 bis 6.2.13 | |
| Fortinet | FortiProxy 1.2 alle Versionen | |
| Fortinet | FortiOS-6K7K 6.4.6 | |
| Fortinet | FortiOS-6K7K 6.2.4 | |
| Fortinet | FortiOS-6K7K 7.0.5 | |
| Fortinet | FortiOS-6K7K 7.0.10 | |
| Fortinet | FortiOS-6K7K 6.4.12 | |
| Fortinet | FortiProxy 7.2.0 bis 7.2.3 | |
| Fortinet | FortiProxy 7.0.0 bis 7.0.9 | |
| Fortinet | FortiOS-6K7K 6.4.8 | |
| Fortinet | FortiOS 7.2.0 bis 7.2.4 | |
| Fortinet | FortiProxy 1.1 alle Versionen | |
| Fortinet | FortiOS-6K7K 6.4.2 | |
| Fortinet | FortiProxy 2.0.0 bis 2.0.12 | |
| Fortinet | FortiOS-6K7K 6.2.6 bis 6.2.7 | |
| Fortinet | FortiOS 7.0.0 bis 7.0.11 | |
| Fortinet | FortiOS-6K7K 6.4.10 |
…and 2 more
Exploit Intelligence
- (enisa-kev)
- How to get access via CVE-2022-27997 (github-poc-repo)
- How to get access via CVE-2022-27997 (github-poc-repo)
- How to get access via CVE-2022-27997 (github-poc-repo)
- How to get access via CVE-2022-27997 (github-poc-repo)
- How to get access via CVE-2022-27997 (github-poc-repo)
- How to get access via CVE-2022-27997 (github-poc-repo)
- How to get access via CVE-2022-27997 (github-poc-repo)
- How to get access via CVE-2022-27997 (github-poc-repo)
- How to get access via CVE-2022-27997 (github-poc-repo)
…and 551 more exploits
Timeline
- Jan 20, 1970 VulnCheck XDB Entry
- Jan 20, 1970 VulnCheck XDB Entry
- Jan 20, 1970 VulnCheck XDB Entry
- Jan 20, 1970 VulnCheck XDB Entry
- Jan 20, 1970 VulnCheck XDB Entry
- Jan 20, 1970 VulnCheck XDB Entry
- Jan 21, 1970 VulnCheck XDB Entry
- Jan 21, 1970 VulnCheck XDB Entry
- Jun 11, 2023 CVE Published
- Jun 12, 2023 VulnCheck KEV Exploitation
- Jun 13, 2023 CISA KEV Added
- Jun 13, 2023 PoC Published