| Title | FortiOS / FortiProxy - Heap buffer underflow in administrative interface |
|---|
| Description | CVE ID CVE-2023-25610
A buffer underwrite ('buffer underflow') vulnerability in FortiOS & FortiProxy administrative interface may allow a remote unauthenticated attacker to execute arbitrary code on the device and/or perform a DoS on the GUI, via specifically crafted requests.
Exploitation status:
Fortinet is not aware of any instance where this vulnerability was exploited in the wild. We continuously review and test the security of our products, and this vulnerability was internally discovered within that frame.
Solutions
Please upgrade to FortiOS version 7.4.0 or above
Please upgrade to FortiOS version 7.2.4 or above
Please upgrade to FortiOS version 7.0.10 or above
Please upgrade to FortiOS version 6.4.12 or above
Please upgrade to FortiOS version 6.2.13 or above
Please upgrade to FortiProxy version 7.2.3 or above
Please upgrade to FortiProxy version 7.0.9 or above
Please upgrade to FortiOS-6K7K version 7.0.10 or above
Please upgrade to FortiOS-6K7K version 6.4.12 or above
Please upgrade to FortiOS-6K7K version 6.2.13 or above |
|---|
| Source | ⚠️ https://www.fortiguard.com/psirt/FG-IR-23-001 |
|---|
| User | Anonymous User |
|---|
| Submission | 03/12/2023 13:51 (3 years ago) |
|---|
| Moderation | 03/12/2023 14:12 (21 minutes later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 222864 [Fortinet FortiOS/FortiProxy Administrative Interface buffer underflow] |
|---|
| Points | 20 |
|---|