Database/Control plane, storage & DevOps
Fortinet FortiOS: SSL-VPN heap-based buffer overflow
CVSS 9.8CVE-2022-42475Control plane, storage & DevOpsKnown exploitedcurated
Impact
SSL-VPN heap-based buffer overflow -> unauthenticated RCE, exploited as a zero-day
Who can reach it
Network (remote)
What to do
Control-plane: firmware upgrade; full IOC sweep
References
Related entries
- Fortinet FortiOS: SSL-VPN out-of-bounds writeCVE-2024-21762 · Fortinet FortiOSCritical
- Linux NFS server (nfsd, nfssvc_decode_writeargs): The NFSv2/v3 write argument decoder has no lower bound on the lengthCVE-2022-49280 · Linux NFS server (nfsd, nfssvc_decode_writeargs)Critical
- AMD SMM Supervisor (AMD-SB-7011): The highest-scored AMD platform CVE in this database at 9.8 critical. A flaw in theCVE-2023-20596 · AMD SMM Supervisor (AMD-SB-7011)Critical
- Fortinet FortiOS / FortiProxy SSL-VPN: A heap-based buffer overflow in the SSL-VPN daemon lets a remoteCVE-2023-27997 · Fortinet FortiOS / FortiProxy SSL-VPNCritical
- Progress MOVEit Transfer: Unauthenticated SQL injection into the web appCVE-2023-34362 · Progress MOVEit TransferCritical
- Citrix NetScaler ADC/Gateway: Unauthenticated remote code execution on the gateway applianceCVE-2023-3519 · Citrix NetScaler ADC/GatewayCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.