Description

A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiOS before 7.0.3 allows a privileged attacker to execute arbitrary code via specially crafted CLI commands, provided the attacker were able to evade FortiOS stack protections.

Related CPE's

o

fortinet

fortios

Vulnerable

References

https://fortiguard.com/psirt/FG-IR-23-149

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-23-149

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-121

[email protected]

Primary
CWE-787

CVSS impact metrics

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

6.4 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-17T08:15:09.703Z

2 years ago

Last modified

2024-11-21T06:56:40.370Z

1 year ago