FortiOS and FortiProxy SSL-VPN

Jun 13, 2023high

CVE-2023-27997: Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests. Required action: Apply updates per vendor instructions.

CVE-2023-27997EPSS 85.7%FortiOS and FortiProxy SSL-VPNFortinet

CISA KEV ↗ · unattributed attribution