Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
fortinetFortiGuard LabsFG-IR-22-398
HistoryDec 12, 2022 - 12:00 a.m.

Protect

2022-12-1200:00:00
FortiGuard Labs
www.fortiguard.com
42

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.387 Low

EPSS

Percentile

96.8%

JSON

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Related

hivepro 2
nessus 1
githubexploit 6
cnvd 1
thn 10
prion 1
rapid7blog 2
attackerkb 1
cisa_kev 1
cisa 1
cve 1
ics 3
trellix 2
hivepro
hivepro
New BOLDMOVE Backdoor uses FortiOS vulnerability for initial access
2023-01-23 03:34:45
Active exploitation of the Fortinet pre-auth RCE vulnerability
2022-12-13 11:11:20
nessus
nessus
Fortinet Fortigate heap-based buffer overflow in sslvpnd (FG-IR-22-398)
2022-12-12 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Fortinet Fortios
2023-03-16 00:05:30
Exploit for Out-of-bounds Write in Fortinet Fortios
2023-03-22 04:26:22
Exploit for Out-of-bounds Write in Fortinet Fortios
2023-03-23 06:48:14
cnvd
cnvd
Fortinet FortiOS SSLVPN Remote Code Execution Vulnerability
2022-12-13 00:00:00
thn
thn
FortiOS Flaw Exploited as Zero-Day in Attacks on Government and Organizations
2023-01-13 09:41:00
Chinese Hackers Exploited FortiGate Flaw to Breach Dutch Military Network
2024-02-07 06:29:00
Chinese Hackers Exploited Recent Fortinet Flaw as 0-Day to Drop Malware
2023-01-20 06:59:00
prion
prion
Heap overflow
2023-01-02 09:15:00
rapid7blog
rapid7blog
CVE-2022-42475: Critical Unauthenticated Remote Code Execution Vulnerability in FortiOS; Exploitation Reported
2022-12-12 18:48:08
Critical Fortinet FortiOS CVE-2024-21762 Exploited
2024-02-12 13:23:51
attackerkb
attackerkb
CVE-2022-42475
2023-01-02 00:00:00
cisa_kev
cisa_kev
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
2022-12-13 00:00:00
cisa
cisa
Fortinet Releases Security Updates for FortiOS
2022-12-12 00:00:00
cve
cve
CVE-2022-42475
2023-01-02 09:15:09
ics
ics
PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure
2024-02-07 12:00:00
Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475
2023-09-07 12:00:00
2022 Top Routinely Exploited Vulnerabilities
2023-08-03 12:00:00
trellix
trellix
The Bug Report December 2022 Edition
2023-01-04 00:00:00
The Bug Report December 2022 Edition
2023-01-04 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.387 Low

EPSS

Percentile

96.8%

JSON
Related for FG-IR-22-398
hivepro2nessus1githubexploit6cnvd1thn10prion1rapid7blog2attackerkb1cisa_kev1cisa1cve1ics3trellix2