CVEvulnerability
CVE-2023-45584
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2025-08-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.6 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-415
Description
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0 through 7.0.13 allows a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.
Affected configurations
• fortinet fortios (>= 6.4.0 < 7.0.13)
• fortinet fortios (>= 7.2.0 < 7.2.6)
• fortinet fortios 7.4.0
• fortinet fortipam (>= 1.0.0 <= 1.1.2)
• fortinet fortiproxy (>= 7.0.0 < 7.0.14)
• fortinet fortiproxy (>= 7.2.0 < 7.2.8)
• fortinet fortiproxy (>= 7.4.0 < 7.4.2)
Related
Weakness · CWE (1)
- CWE-415 Double Free weakness
References
- https://fortiguard.fortinet.com/psirt/FG-IR-23-209 Vendor Advisory