CVE-2023-46718
At a glance Severity MEDIUM 6.3 EPSS EPSS 0.19 % · percentile 8 (2026-10-27) State PUBLISHED Published 2025-10-14 Updated 2026-02-26 Assigner fortinet NVD status Analyzed Description A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted CLI commands.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X fortinet CVSS 3.1 MEDIUM 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H NVD · psirt@fortinet.com (Secondary) CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 6.0.13 ≤ 6.0.18cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 6.2.9 ≤ 6.2.17cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 6.4.6 ≤ 6.4.16cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.2.12cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.4.0 < 7.4.2cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.4.8Affected products Product Versions Fortinet · FortiOS affected 7.4.0 ≤ 7.4.1 ; affected 7.2.0 ≤ 7.2.11 ; affected 7.0.0 ≤ 7.0.18 ; affected 6.4.6 ≤ 6.4.16 ; affected 6.2.9 ≤ 6.2.17 ; affected 6.0.13 ≤ 6.0.18 Fortinet · FortiProxy affected 7.4.0 ≤ 7.4.7 ; affected 7.2.0 ≤ 7.2.15 ; affected 7.0.0 ≤ 7.0.22
References
Sources
