CVE-2023-22640
Published May 3, 2023
Last updated a year ago
Overview
- Description
- A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.11, FortiOS version 6.2.0 through 6.2.13, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7, FortiProxy all versions 2.0, FortiProxy all versions 1.2, FortiProxy all versions 1.1, FortiProxy all versions 1.0 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.
- Source
- psirt@fortinet.com
- NVD status
- Modified
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:fortiproxy:1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EAFD6A7-AAC9-4073-9329-F5B1D9835E6B"
},
{
"criteria": "cpe:2.3:a:fortinet:fortiproxy:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "666BE44D-1B17-4B2E-9BA1-3A127CC0E0FE"
},
{
"criteria": "cpe:2.3:a:fortinet:fortiproxy:1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "906F778B-919C-499C-A2D5-4B59F206E430"
},
{
"criteria": "cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"
},
{
"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EA5512D-6EE5-4DF3-A960-C02394F25225",
"versionEndIncluding": "6.0.16",
"versionStartIncluding": "6.0.0"
},
{
"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D539CF21-2985-4E9B-94E8-E0B696752291",
"versionEndExcluding": "6.2.14",
"versionStartIncluding": "6.2.0"
},
{
"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4AA72D9-CD66-4628-92B5-6CDFCB8E0EEE",
"versionEndExcluding": "6.4.12",
"versionStartIncluding": "6.4.0"
},
{
"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8870AB06-C50F-452A-952C-30DE7860264E",
"versionEndExcluding": "7.0.11",
"versionStartIncluding": "7.0.0"
},
{
"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5",
"versionEndExcluding": "7.2.4",
"versionStartIncluding": "7.2.0"
}
],
"operator": "OR"
}
]
}
]