CVE-2023-41678 — Vulnetix

CVE-2023-41678 PUBLISHED

Es existiert eine Schwachstelle in Fortinet FortiOS. Im HTTPSd-Daemon besteht ein "Double Free"- Problem. Ein authentisierter Angreifer kann diese Schwachstelle ausnutzen, um über speziell gestaltete Befehle beliebigen Code zur Ausführung zu bringen.

EPSS 0.28% · 51.8th percentile

Risk Scores

EPSS Score

0.28%

51.8th percentile

Affected Products

Vendor	Product	Versions
Fortinet	Fortinet FortiOS 7.0.0 - 7.0.5

Exploit Intelligence

CIRCL seen: CVE-2023-41678 (circl-sighting)
https://fortiguard.com/psirt/FG-IR-23-196 (circl)

Timeline

Dec 12, 2023 CVE Published
Dec 13, 2023 EPSS Score
Jan 2, 2024 PoC Published
Jan 11, 2024 EPSS Score
Feb 10, 2024 EPSS Score
Mar 10, 2024 EPSS Score
Apr 8, 2024 EPSS Score
May 7, 2024 EPSS Score
Jun 6, 2024 EPSS Score
Jul 5, 2024 EPSS Score
Aug 3, 2024 EPSS Score
Sep 1, 2024 EPSS Score

References

https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3121.json advisory
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3121 advisory
https://www.fortiguard.com/psirt/FG-IR-23-196 advisory

Open in Interactive Console →