Lucene search
HistoryJan 02, 2023 - 9:15 a.m.
CVE-2022-42475
buffer overflow
fortios
ssl-vpn
fortiproxy
remote attacker
arbitrary code
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.274
Percentile
96.9%
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
Affected configurations
Node
fortinetfortiosRange5.0.0–5.0.14
ORfortinetfortiosRange5.2.0–5.2.15
ORfortinetfortiosRange5.4.0–5.4.13
ORfortinetfortiosRange5.6.0–5.6.14
ORfortinetfortiosRange6.0.0–6.0.16
ORfortinetfortiosRange6.2.0–6.2.12
ORfortinetfortiosRange6.4.0–6.4.11
ORfortinetfortiosRange7.0.0–7.0.9
ORfortinetfortiosRange7.2.0–7.2.3
Node
fortinetfortiproxyRange1.0.0–1.0.7
ORfortinetfortiproxyRange1.1.0–1.1.6
ORfortinetfortiproxyRange1.2.0–1.2.13
ORfortinetfortiproxyRange2.0.0–2.0.11
ORfortinetfortiproxyRange7.0.0–7.0.8
ORfortinetfortiproxyRange7.2.0–7.2.2
Node
fortinetfortiosRange6.0.0–6.0.15
ORfortinetfortiosRange6.2.0–6.2.12
ORfortinetfortiosRange6.4.0–6.4.10
ORfortinetfortiosRange7.0.0–7.0.8
fortinetfim-7901eMatch-
ORfortinetfim-7904eMatch-
ORfortinetfim-7910eMatch-
ORfortinetfim-7920eMatch-
ORfortinetfim-7921fMatch-
ORfortinetfim-7941fMatch-
ORfortinetfortigate-6300fMatch-
ORfortinetfortigate-6300f-dcMatch-
ORfortinetfortigate-6500fMatch-
ORfortinetfortigate-6500f-dcMatch-
ORfortinetfortigate-6501fMatch-
ORfortinetfortigate-6501f-dcMatch-
ORfortinetfortigate-6601fMatch-
ORfortinetfortigate-6601f-dcMatch-
ORfortinetfortigate-7030eMatch-
ORfortinetfortigate-7040eMatch-
ORfortinetfortigate-7060eMatch-
ORfortinetfortigate-7121fMatch-
ORfortinetfpm-7620eMatch-
ORfortinetfpm-7620fMatch-
ORfortinetfpm-7630eMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fortinet | fortios | * | cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* |
| fortinet | fortiproxy | * | cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* |
| fortinet | fim-7901e | - | cpe:2.3:h:fortinet:fim-7901e:-:*:*:*:*:*:*:* |
| fortinet | fim-7904e | - | cpe:2.3:h:fortinet:fim-7904e:-:*:*:*:*:*:*:* |
| fortinet | fim-7910e | - | cpe:2.3:h:fortinet:fim-7910e:-:*:*:*:*:*:*:* |
| fortinet | fim-7920e | - | cpe:2.3:h:fortinet:fim-7920e:-:*:*:*:*:*:*:* |
| fortinet | fim-7921f | - | cpe:2.3:h:fortinet:fim-7921f:-:*:*:*:*:*:*:* |
| fortinet | fim-7941f | - | cpe:2.3:h:fortinet:fim-7941f:-:*:*:*:*:*:*:* |
| fortinet | fortigate-6300f | - | cpe:2.3:h:fortinet:fortigate-6300f:-:*:*:*:*:*:*:* |
| fortinet | fortigate-6300f-dc | - | cpe:2.3:h:fortinet:fortigate-6300f-dc:-:*:*:*:*:*:*:* |
References
Related
hivepro
hivepro
New BOLDMOVE Backdoor uses FortiOS vulnerability for initial access
2023-01-23 03:34:45
Active exploitation of the Fortinet pre-auth RCE vulnerability
2022-12-13 11:11:20
nessus
nessus
Fortinet Fortigate heap-based buffer overflow in sslvpnd (FG-IR-22-398)
2022-12-12 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Fortinet Fortios
2023-03-16 00:05:30
Exploit for Out-of-bounds Write in Fortinet Fortios
2023-03-22 04:26:22
Exploit for Numeric Truncation Error in Fortinet Fortios
2023-06-21 21:22:35
ics
ics
PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure
2024-02-07 12:00:00
2022 Top Routinely Exploited Vulnerabilities
2023-08-03 12:00:00
cve
cve
CVE-2022-42475
2023-01-02 09:15:09
talosblog
talosblog
Tabletop exercises are headed to the next frontier: Space
2024-06-20 18:00:39
attackerkb
attackerkb
CVE-2022-42475
2023-01-02 00:00:00
rapid7blog
rapid7blog
thn
thn
Chinese Hackers Exploited FortiGate Flaw to Breach Dutch Military Network
2024-02-07 06:29:00
cisa_kev
cisa_kev
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
2022-12-13 00:00:00
prion
prion
Heap overflow
2023-01-02 09:15:00
cnvd
cnvd
Fortinet FortiOS SSLVPN Remote Code Execution Vulnerability
2022-12-13 00:00:00
cisa
cisa
Fortinet Releases Security Updates for FortiOS
2022-12-12 00:00:00
cvelist
cvelist
CVE-2022-42475
2023-01-02 08:18:49
fortinet
fortinet
Protect
2022-12-12 00:00:00
trellix
trellix
The Bug Report December 2022 Edition
2023-01-04 00:00:00
The Bug Report December 2022 Edition
2023-01-04 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.274
Percentile
96.9%
Related for NVD:CVE-2022-42475