Lucene search

[email protected]CVE-2023-22639

HistoryJun 13, 2023 - 9:15 a.m.

CVE-2023-22639

2023-06-1309:15:16

CWE-787

[email protected]

web.nvd.nist.gov

cve

2023

22639

fortinet

fortios

vulnerability

out-of-bounds write

privilege escalation

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.3%

JSON

A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.12, FortiOS all versions 6.2, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.2, FortiProxy version 7.0.0 through 7.0.8, FortiProxy all versions 2.0, FortiProxy all versions 1.2, FortiProxy all versions 1.1, FortiProxy all versions 1.0 allows attacker to escalation of privilege via specifically crafted commands.

CPENameOperatorVersion
fortinet:fortiproxyfortinet fortiproxyle1.0.7
fortinet:fortiproxyfortinet fortiproxyeq1.0.1
fortinet:fortiproxyfortinet fortiproxyeq1.0.2
fortinet:fortiproxyfortinet fortiproxyeq1.0.0
fortinet:fortiproxyfortinet fortiproxyeq1.0.3
fortinet:fortiproxyfortinet fortiproxyeq1.0.6
fortinet:fortiproxyfortinet fortiproxyeq1.0.4
fortinet:fortiproxyfortinet fortiproxyeq1.0.7
fortinet:fortiproxyfortinet fortiproxyeq1.0.5
fortinet:fortiproxyfortinet fortiproxyle1.1.6

CPE	Name	Operator	Version
fortinet:fortiproxy	fortinet fortiproxy	le	1.0.7
fortinet:fortiproxy	fortinet fortiproxy	eq	1.0.1
fortinet:fortiproxy	fortinet fortiproxy	eq	1.0.2
fortinet:fortiproxy	fortinet fortiproxy	eq	1.0.0
fortinet:fortiproxy	fortinet fortiproxy	eq	1.0.3
fortinet:fortiproxy	fortinet fortiproxy	eq	1.0.6
fortinet:fortiproxy	fortinet fortiproxy	eq	1.0.4
fortinet:fortiproxy	fortinet fortiproxy	eq	1.0.7
fortinet:fortiproxy	fortinet fortiproxy	eq	1.0.5
fortinet:fortiproxy	fortinet fortiproxy	le	1.1.6

Rows per page:

1-10 of 1241

References

fortiguard.com/psirt/FG-IR-22-494

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.3%

JSON

Related for CVE-2023-22639

prion1 nessus1 fortinet1 cvelist1 ics1