CVE-2023-42789
En bref Sévérité CRITICAL 9.3 EPSS EPSS 3.31 % · centile 88 (2026-10-27) État PUBLISHED Publiée 2024-03-12 Mise à jour 2026-07-08 Attribuée par fortinet Statut NVD Modified Description A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0.0 through 7.0.12, FortiProxy 2.0.0 through 2.0.13, FortiSASE 23.2.b allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
Scores Version Score Vecteur Évalué par CVSS 3.1 CRITICAL 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C fortinet CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · psirt@fortinet.com (Secondary) CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 2.0.0 ≤ 2.0.13cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.0.0 ≤ 7.0.12cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.2.0 ≤ 7.2.6cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 6.2.0 ≤ 6.2.15cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 6.4.0 ≤ 6.4.14cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.0.0 ≤ 7.0.12cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.2.0 ≤ 7.2.5cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*Produits affectés Produit Versions Fortinet · FortiProxy affected 7.4.0 ; affected 7.2.0 ≤ 7.2.6 ; affected 7.0.0 ≤ 7.0.12 ; affected 2.0.0 ≤ 2.0.13 Fortinet · FortiSASE affected 23.2.b Fortinet · FortiOS affected 7.4.0 ≤ 7.4.1 ; affected 7.2.0 ≤ 7.2.5 ; affected 7.0.0 ≤ 7.0.12 ; affected 6.4.0 ≤ 6.4.14 ; affected 6.2.0 ≤ 6.2.15
Références
Sources
