Description
Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| FortiOS | Fortinet / FortiOS | >= 6.0.0, <= 6.0.16 | affected |
| FortiOS | Fortinet / FortiOS | >= 6.2.0, <= 6.2.13 | affected |
| FortiOS | Fortinet / FortiOS | >= 6.4.0, <= 6.4.12 | affected |
| FortiOS | Fortinet / FortiOS | >= 7.0.0, <= 7.0.11 | affected |
| FortiOS | Fortinet / FortiOS | >= 7.2.0, <= 7.2.4 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | 6.0.10 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | >= 6.0.12, <= 6.0.16 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | 6.2.4 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | >= 6.2.6, <= 6.2.7 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | >= 6.2.9, <= 6.2.13 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | 6.4.10 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | 6.4.12 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | 6.4.2 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | 6.4.6 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | 6.4.8 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | 7.0.10 | affected |
| FortiOS-6K7K | Fortinet / FortiOS-6K7K | 7.0.5 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 1.1.0, <= 1.1.6 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 1.2.0, <= 1.2.13 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 2.0.0, <= 2.0.12 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.0.0, <= 7.0.9 | affected |
| FortiProxy | Fortinet / FortiProxy | >= 7.2.0, <= 7.2.3 | affected |