CVE-2023-42790
En bref Sévérité HIGH 7.7 EPSS EPSS 1.08 % · centile 65 (2026-10-27) État PUBLISHED Publiée 2024-03-12 Mise à jour 2026-07-08 Attribuée par fortinet Statut NVD Modified Description A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0.0 through 7.0.12, FortiProxy 2.0.0 through 2.0.13, FortiSASE 23.2.b allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
Scores Version Score Vecteur Évalué par CVSS 3.1 HIGH 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C fortinet CVSS 3.1 HIGH 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · psirt@fortinet.com (Secondary) CVSS 3.1 HIGH 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 2.0.0 ≤ 2.0.13cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.0.0 ≤ 7.0.12cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.2.0 ≤ 7.2.6cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 6.2.0 ≤ 6.2.15cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 6.4.0 ≤ 6.4.14cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.0.0 ≤ 7.0.12cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.2.0 ≤ 7.2.5cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.4.0 ≤ 7.4.1Produits affectés Produit Versions Fortinet · FortiProxy affected 7.4.0 ; affected 7.2.0 ≤ 7.2.6 ; affected 7.0.0 ≤ 7.0.12 ; affected 2.0.0 ≤ 2.0.13 Fortinet · FortiOS affected 7.4.0 ≤ 7.4.1 ; affected 7.2.0 ≤ 7.2.5 ; affected 7.0.0 ≤ 7.0.12 ; affected 6.4.0 ≤ 6.4.14 ; affected 6.2.0 ≤ 6.2.15
Références
Sources
