CVEvulnerability

CVE-2022-42475

9.8 CRITICAL Known exploited Published 2023-01-02 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability — Fortinet FortiOS

Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.

Added to KEV: 2022-12-13
Remediation due: 2023-01-03
Ransomware use: Known
Required action: Apply updates per vendor instructions.
Notes: https://www.fortiguard.com/psirt/FG-IR-22-398; https://nvd.nist.gov/vuln/detail/CVE-2022-42475

Status: Analyzed
Published: 2023-01-02
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-197, CWE-787

Description

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Affected configurations

• fortinet fortios (>= 5.0.0 <= 5.0.14) • fortinet fortios (>= 5.2.0 <= 5.2.15) • fortinet fortios (>= 5.4.0 <= 5.4.13) • fortinet fortios (>= 5.6.0 <= 5.6.14) • fortinet fortios (>= 6.0.0 < 6.0.16) • fortinet fortios (>= 6.2.0 < 6.2.12) • fortinet fortios (>= 6.4.0 < 6.4.11) • fortinet fortios (>= 7.0.0 < 7.0.9) • fortinet fortios (>= 7.2.0 < 7.2.3) • fortinet fortiproxy (>= 1.0.0 <= 1.0.7) • fortinet fortiproxy (>= 1.1.0 <= 1.1.6) • fortinet fortiproxy (>= 1.2.0 <= 1.2.13) • fortinet fortiproxy (>= 2.0.0 < 2.0.12) • fortinet fortiproxy (>= 7.0.0 < 7.0.8) • fortinet fortiproxy (>= 7.2.0 < 7.2.2) • fortinet fortios (>= 6.0.0 < 6.0.15) • fortinet fortios (>= 6.4.0 < 6.4.10) • fortinet fortios (>= 7.0.0 < 7.0.8)

Weakness · CWE (2)

CWE-197 Numeric Truncation Error weakness
CWE-787 Out-of-bounds Write weakness

References