CVEvulnerability
CVE-2023-41678
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-12-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-415
Description
A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request.
Affected configurations
• fortinet fortios 7.0.0
• fortinet fortios 7.0.1
• fortinet fortios 7.0.2
• fortinet fortios 7.0.3
• fortinet fortios 7.0.4
• fortinet fortios 7.0.5
• fortinet fortipam 1.0.0
• fortinet fortipam 1.0.1
• fortinet fortipam 1.0.2
• fortinet fortipam 1.0.3
• fortinet fortipam 1.1.0
• fortinet fortipam 1.1.1
Related
Weakness · CWE (1)
- CWE-415 Double Free weakness
References
- https://fortiguard.com/psirt/FG-IR-23-196 Vendor Advisory
- https://fortiguard.com/psirt/FG-IR-23-196 Vendor Advisory