Description

A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiOS before 7.0.3 allows a privileged attacker to execute arbitrary code via specially crafted CLI commands, provided the attacker were able to evade FortiOS stack protections.

Related CPE's

o

fortinet

fortios

Vulnerable

References

https://fortiguard.com/psirt/FG-IR-23-149

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-787

[email protected]

Secondary
CWE-121

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.7 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-17T10:15:09.703

11 months ago

Last modified

2023-11-07T04:11:06.650

8 months ago