HexBrain

Browse / CVEs / CVE-2023-27997

CVE-2023-27997· fortinet / fortios and fortiproxy ssl-vpn· CWE-122

Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

Exploited in the wild. Listed by CISA on 2023-06-13; known to be used by ransomware.

86.8%likelihood of exploitation, next 30 days
100%of all CVEs are less likely
Nonecheck to confirm it

Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.

No ready check is stored for this CVE. Confirm it by hand from the references.

References

Use this check only on systems you are authorised to test. Where the data comes from