CVEvulnerability

CVE-2023-37930

8.8 HIGH Published 2025-04-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-04-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-908

Description

Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests.

Affected configurations

• fortinet fortios (>= 6.4.7 < 6.4.15) • fortinet fortios (>= 7.0.1 < 7.0.13) • fortinet fortios (>= 7.2.0 < 7.2.6) • fortinet fortios 7.4.0 • fortinet fortiproxy (>= 7.0.0 < 7.0.13) • fortinet fortiproxy (>= 7.2.0 < 7.2.7)

Related

Weakness · CWE (1)

  • CWE-908 Use of Uninitialized Resource weakness

References