CVE-2022-42475
Assigner: fortinet
Published: 2023-01-02T08:18:49.444Z
State: PUBLISHED
affected: vendor: Fortinet
product: FortiProxy
defaultStatus: unaffected
versions: versionType: semver
version: 7.2.0
lessThanOrEqual: 7.2.1
status: affected
versionType: semver
version: 7.0.0
lessThanOrEqual: 7.0.7
status: affected
versionType: semver
version: 2.0.0
lessThanOrEqual: 2.0.11
status: affected
versionType: semver
version: 1.2.0
lessThanOrEqual: 1.2.13
status: affected
versionType: semver
version: 1.1.0
lessThanOrEqual: 1.1.6
status: affected
versionType: semver
version: 1.0.0
lessThanOrEqual: 1.0.7
status: affected
vendor: Fortinet
product: FortiOS
defaultStatus: unaffected
versions: versionType: semver
version: 7.2.0
lessThanOrEqual: 7.2.2
status: affected
versionType: semver
version: 7.0.0
lessThanOrEqual: 7.0.8
status: affected
versionType: semver
version: 6.4.0
lessThanOrEqual: 6.4.10
status: affected
versionType: semver
version: 6.2.0
lessThanOrEqual: 6.2.11
status: affected
versionType: semver
version: 6.0.0
lessThanOrEqual: 6.0.15
status: affected
versionType: semver
version: 5.6.0
lessThanOrEqual: 5.6.14
status: affected
versionType: semver
version: 5.4.0
lessThanOrEqual: 5.4.13
status: affected
versionType: semver
version: 5.2.0
lessThanOrEqual: 5.2.15
status: affected
versionType: semver
version: 5.0.0
lessThanOrEqual: 5.0.14
status: affected
descriptions: value: A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier  and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
problemTypes: descriptions: cweId: CWE-197
description: Execute unauthorized code or commands
type: CWE
metrics: format: CVSS
cvssV3_1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.3
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
solutions: value: Please upgrade to FortiOS version 7.2.3 or above
Please upgrade to FortiOS version 7.0.9 or above
Please upgrade to FortiOS version 6.4.11 or above
Please upgrade to FortiOS version 6.2.12 or above
Please upgrade to FortiOS version 6.0.16 or above
Please upgrade to upcoming FortiOS-6K7K version 7.0.8 or above
Please upgrade to FortiOS-6K7K version 6.4.10 or above
Please upgrade to FortiOS-6K7K version 6.2.12 or above
Please upgrade to FortiOS-6K7K version 6.0.15 or above
Please upgrade to FortiProxy version 7.2.2 or above
Please upgrade to FortiProxy version 7.0.8 or above
Please upgrade to upcoming FortiProxy version 2.0.12 or above