| tiêu đề | FortiOS / FortiProxy - Heap buffer underflow in administrative interface |
|---|
| Mô tả | CVE ID CVE-2023-25610
A buffer underwrite ('buffer underflow') vulnerability in FortiOS & FortiProxy administrative interface may allow a remote unauthenticated attacker to execute arbitrary code on the device and/or perform a DoS on the GUI, via specifically crafted requests.
Exploitation status:
Fortinet is not aware of any instance where this vulnerability was exploited in the wild. We continuously review and test the security of our products, and this vulnerability was internally discovered within that frame.
Solutions
Please upgrade to FortiOS version 7.4.0 or above
Please upgrade to FortiOS version 7.2.4 or above
Please upgrade to FortiOS version 7.0.10 or above
Please upgrade to FortiOS version 6.4.12 or above
Please upgrade to FortiOS version 6.2.13 or above
Please upgrade to FortiProxy version 7.2.3 or above
Please upgrade to FortiProxy version 7.0.9 or above
Please upgrade to FortiOS-6K7K version 7.0.10 or above
Please upgrade to FortiOS-6K7K version 6.4.12 or above
Please upgrade to FortiOS-6K7K version 6.2.13 or above |
|---|
| Nguồn | ⚠️ https://www.fortiguard.com/psirt/FG-IR-23-001 |
|---|
| Người dùng | Anonymous User |
|---|
| Đệ trình | 12/03/2023 13:51 (cách đây 3 những năm) |
|---|
| Kiểm duyệt | 12/03/2023 14:12 (21 minutes later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 222864 [Fortinet FortiOS/FortiProxy Administrative Interface Thực thi mã từ xa] |
|---|
| điểm | 20 |
|---|