CVE-2023-42789
CRITICAL 9.8EPSS 3.3%
A out-of-bounds write in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
- Affected
- Fortinet · FortiProxy · FortiSASE · FortiOS
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 3.31% chance of exploitation in the next 30 days, 88th percentile
- Published
- 2024-03-12
- Updated
- 2026-07-08
Proof-of-concept exploits (1)
- jhonnybonny/CVE-2023-427891★ · 2024-03-28