CVE-2022-40683

2023-02-1619:15:13

CWE-415

fortinet

web.nvd.nist.gov

cve

2022

40683

double free

fortinet

fortiweb

nvd

security vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

13.2%

JSON

A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands

Affected configurations

Nvd

Node

fortinetfortiwebRange7.0.0–7.0.3

VendorProductVersionCPE
fortinetfortiweb*cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fortinet	fortiweb	*	cpe:2.3:a:fortinet:fortiweb::::::::

CNA Affected

[
  {
    "vendor": "Fortinet",
    "product": "FortiWeb",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.3",
        "status": "affected"
      }
    ]
  }
]