Lucene search

[email protected]CVE-2023-41675

HistoryOct 10, 2023 - 5:15 p.m.

CVE-2023-41675

2023-10-1017:15:12

CWE-416

[email protected]

web.nvd.nist.gov

cve-2023-41675

use after free

fortios

fortiproxy

cwe-416

remote attacker

security vulnerability

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

30.9%

JSON

A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 through 7.0.8 may allow an unauthenticated remote attacker to crash the WAD process via multiple crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection.

CPENameOperatorVersion
fortinet:fortiproxyfortinet fortiproxyle7.0.8
fortinet:fortiproxyfortinet fortiproxyeq7.0.4
fortinet:fortiproxyfortinet fortiproxyeq7.0.5
fortinet:fortiproxyfortinet fortiproxyeq7.0.1
fortinet:fortiproxyfortinet fortiproxyeq7.0.7
fortinet:fortiproxyfortinet fortiproxyeq7.0.8
fortinet:fortiproxyfortinet fortiproxyeq7.0.2
fortinet:fortiproxyfortinet fortiproxyeq7.0.6
fortinet:fortiproxyfortinet fortiproxyeq7.0.0
fortinet:fortiproxyfortinet fortiproxyeq7.0.3

CPE	Name	Operator	Version
fortinet:fortiproxy	fortinet fortiproxy	le	7.0.8
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.4
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.5
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.1
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.7
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.8
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.2
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.6
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.0
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.3

Rows per page:

1-10 of 311

References

fortiguard.com/psirt/FG-IR-23-184

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

30.9%

JSON

Related for CVE-2023-41675

fortinet1 cvelist1 nessus1 prion1 ics1