Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

Critical FortiOS and FortiProxy Vulnerability Likely Exploited

The Hacker Newsby @TheHackersNews ()2 min read2
Read at thehackernews.com
Analyze CVE-2023-27997 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2023-27997CVE-2022-42475
Tags
cve-2023-27997cve-2022-42475vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-42475
Unauthenticated Heap Overflow in Fortinet FortiOS/FortiProxy SSL-VPN (Critical RCE)
9.899%KEVRansomwarePoC
KEV
CVE-2023-27997
Pre-Auth Heap Buffer Overflow RCE in Fortinet FortiOS/FortiProxy SSL-VPN
9.887%KEVRansomware
KEV

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jun 13, 2023 Network Security / Vulnerability Fortinet on Monday disclosed that a newly patched critical flaw impacting FortiOS and FortiProxy may have been "exploited in a limited number of cases" in attacks targeting government, manufacturing, and critical infrastructure sectors. The vulnerability , dubbed XORtigate and tracked as CVE-2023-27997 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.