Vulnerabilitycritical

Fortinet urges to patch the critical RCE flaw CVE-2023

Security Affairsby @securityaffairsJun 13, 2023 · 10:49 UTC (Jun 13, 2023)2 min read3 · 2 reads

Read at securityaffairs.com

Analyze CVE-2023-27997 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-27997 CVE-2022-40684

Tags: cve-2023-27997 cve-2022-40684 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-40684	Admin-Interface Auth Bypass in Fortinet FortiOS, FortiProxy & FortiSwitchManager	9.8	100%	KEVRansomwarePoC ×2	Oct 18, 2022 KEV Oct 11, 2022
CVE-2023-27997	Pre-Auth Heap Buffer Overflow RCE in Fortinet FortiOS/FortiProxy SSL-VPN	9.8	87%	KEVRansomware	Jun 13, 2023 KEV Jun 13, 2023

From the original article

2 min read at securityaffairs.com

Fortinet addressed a new critical flaw, tracked as CVE-2023-27997, in FortiOS and FortiProxy that is likely exploited in a limited number of attacks. Fortinet has finally published an official advisory about the critical vulnerability, tracked as CVE-2023-27997 (CVSS score: 9. 2), impacting FortiOS and FortiProxy.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.