| タイトル | FortiOS / FortiProxy - Heap buffer underflow in administrative interface |
|---|
| 説明 | CVE ID CVE-2023-25610
A buffer underwrite ('buffer underflow') vulnerability in FortiOS & FortiProxy administrative interface may allow a remote unauthenticated attacker to execute arbitrary code on the device and/or perform a DoS on the GUI, via specifically crafted requests.
Exploitation status:
Fortinet is not aware of any instance where this vulnerability was exploited in the wild. We continuously review and test the security of our products, and this vulnerability was internally discovered within that frame.
Solutions
Please upgrade to FortiOS version 7.4.0 or above
Please upgrade to FortiOS version 7.2.4 or above
Please upgrade to FortiOS version 7.0.10 or above
Please upgrade to FortiOS version 6.4.12 or above
Please upgrade to FortiOS version 6.2.13 or above
Please upgrade to FortiProxy version 7.2.3 or above
Please upgrade to FortiProxy version 7.0.9 or above
Please upgrade to FortiOS-6K7K version 7.0.10 or above
Please upgrade to FortiOS-6K7K version 6.4.12 or above
Please upgrade to FortiOS-6K7K version 6.2.13 or above |
|---|
| ソース | ⚠️ https://www.fortiguard.com/psirt/FG-IR-23-001 |
|---|
| ユーザー | Anonymous User |
|---|
| 送信 | 2023年03月12日 13:51 (3 年 ago) |
|---|
| モデレーション | 2023年03月12日 14:12 (21 minutes later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 222864 [Fortinet FortiOS/FortiProxy Administrative Interface リモートコード実行] |
|---|
| ポイント | 20 |
|---|