Description
Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| FortiOS | Fortinet / FortiOS | >= 5.0.0, <= 5.0.14 | affected |
| FortiOS | Fortinet / FortiOS | >= 5.2.0, <= 5.2.15 | affected |
| FortiOS | Fortinet / FortiOS | >= 5.4.0, <= 5.4.13 | affected |
| FortiOS | Fortinet / FortiOS | >= 5.6.0, <= 5.6.14 | affected |
| FortiOS | Fortinet / FortiOS | >= 6.0.0, <= 6.0.15 | affected |
| FortiOS | Fortinet / FortiOS | >= 6.2.0, <= 6.2.11 | affected |
| FortiOS | Fortinet / FortiOS | >= 6.4.0, <= 6.4.10 | affected |
| FortiOS | Fortinet / FortiOS | >= 7.0.0, <= 7.0.8 | affected |
| FortiOS | Fortinet / FortiOS | >= 7.2.0, <= 7.2.2 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 1.0.0, <= 1.0.7 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 1.1.0, <= 1.1.6 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 1.2.0, <= 1.2.13 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 2.0.0, <= 2.0.11 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.0.0, <= 7.0.7 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.2.0, <= 7.2.1 | affected |