Critical · published June 13, 2023
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.7th percentile for exploit probability.
🚨 A crafty attacker can execute arbitrary code with a single specially crafted request! This heap-based buffer overflow in FortiOS is a serious threat, and it affects multiple versions. 🔥 Think of this vulnerability like a sneaky pizza delivery that misdelivers multiple extra toppings—only here, those toppings could be malicious commands instead of pepperoni! The system can get overloaded, leading to all sorts of unwanted chaos. An attacker could take complete control of the affected system, executing commands at will. This could mean accessing sensitive data, altering configurations, or even bringing the entire service to its knees. The potential for damage is absolutely devastating!
Think of this vulnerability like a sneaky pizza delivery that misdelivers multiple extra toppings—only here, those toppings could be malicious commands instead of pepperoni! The system can get overloaded, leading to all sorts of unwanted chaos. This heap-based buffer overflow in FortiOS allows an attacker to exploit memory handling errors via crafted requests, leading to arbitrary code execution. Essentially, the system is tricked into executing commands that it shouldn't even be aware of!
An attacker could take complete control of the affected system, executing commands at will. This could mean accessing sensitive data, altering configurations, or even bringing the entire service to its knees. The potential for damage is absolutely devastating! Upgrade all affected FortiOS and FortiProxy versions to the latest secure release immediately: 7.2.5 or higher, 7.0.12 or higher, 6.4.13 or higher, 6.0.17 or higher, and 2.0.13 or higher for FortiProxy. Conduct a thorough review of your configurations and logs for any unauthorized access! You’ve got this! Act fast and harden your defenses; together, we’ll keep the internet safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| fortinet/fortiproxy | ≥ 1.1.0, ≤ 1.1.6 | — |
| fortinet/fortiproxy | ≥ 1.2.0, ≤ 1.2.13 | — |
| fortinet/fortiproxy | ≥ 2.0.0, ≤ 2.0.12 | — |
| fortinet/fortiproxy | ≥ 7.0.0, ≤ 7.0.9 | — |
| fortinet/fortiproxy | ≥ 7.2.0, ≤ 7.2.3 | — |
| fortinet/fortios | ≥ 6.0.0, ≤ 6.0.16 | — |
| fortinet/fortios | ≥ 6.2.0, ≤ 6.2.13 | — |
| fortinet/fortios | ≥ 6.4.0, ≤ 6.4.12 | — |
| fortinet/fortios | ≥ 7.0.0, ≤ 7.0.11 | — |
| fortinet/fortios | ≥ 7.2.0, ≤ 7.2.4 | — |
| fortinet/fortios | ≥ 6.0.12, ≤ 6.0.16 | — |
| fortinet/fortios | ≥ 6.2.9, ≤ 6.2.13 | — |
| fortinet/fortios | all versions | — |
| fortinet/fortios | all versions | — |
| fortinet/fortios | all versions | — |
| fortinet/fortios | all versions | — |
| fortinet/fortios | all versions | — |
| fortinet/fortios | all versions | — |
| fortinet/fortios | all versions | — |
| fortinet/fortios | all versions | — |
| fortinet/fortios | all versions | — |
| fortinet/fortios | all versions | — |
| fortinet/fortios | all versions | — |