VDB

CVE-2023-42789

CVE-2023-42789 PUBLISHED

Es bestehen mehrere Schwachstellen in Fortinet FortiOS und Fortinet FortiProxy. Diese Fehler bestehen aufgrund eines Out-of-bounds-Schreibproblems. Durch das Senden speziell gestalteter HTTP-Anfragen kann ein entfernter, anonymer Angreifer diese Schwachstellen zur Ausführung von beliebigem Code ausnutzen.

EPSS 28.28% · 96.6th percentile

Risk Scores

EPSS Score
28.28%
96.6th percentile

Affected Products

VendorProductVersions
FortinetFortinet FortiOS <6.4.15
FortinetFortinet FortiOS <7.2.6
FortinetFortinet FortiProxy <7.2.7
FortinetFortinet FortiProxy <7.4.1
FortinetFortinet FortiProxy <7.0.13
FortinetFortinet FortiOS <7.0.13
FortinetFortinet FortiProxy <2.0.14
FortinetFortinet FortiOS <6.2.16
FortinetFortinet FortiOS <7.4.2

Timeline

  • Mar 12, 2024 CVE Published
  • Mar 12, 2024 PoC Published
  • Mar 12, 2024 PoC Published
  • Mar 12, 2024 PoC Published
  • Mar 13, 2024 EPSS Score
  • Mar 13, 2024 PoC Published
  • Mar 13, 2024 PoC Published
  • Mar 13, 2024 PoC Published
  • Mar 13, 2024 PoC Published
  • Mar 13, 2024 PoC Published
  • May 4, 2024 EPSS Score
  • May 30, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›