CVE-2023-37930
At a glance Severity MEDIUM 6.7 EPSS EPSS 0.64 % · percentile 51 (2026-10-27) State PUBLISHED Published 2025-04-08 Updated 2026-02-26 Assigner fortinet NVD status Modified Description Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C fortinet CVSS 3.1 HIGH 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · psirt@fortinet.com (Secondary) CVSS 3.1 HIGH 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 6.4.7 < 6.4.15cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.0.1 < 7.0.13cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.2.0 < 7.2.6cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.0.13cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.2.0 < 7.2.7Affected products
References
Sources
