Lucene search
HistoryFeb 16, 2023 - 7:15 p.m.
CVE-2022-40683
fortinet fortiweb
vulnerability
double free
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.1%
A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands
Affected configurations
Node
fortinetfortiwebRange7.0.0–7.0.3
References
Related
cve
cve
CVE-2022-40683
2023-02-16 19:15:13
cvelist
cvelist
CVE-2022-40683
2023-02-16 18:07:04
nessus
nessus
Fortinet FortiWeb - Double free in pipe management (FG-IR-22-348)
2024-05-22 00:00:00
fortinet
fortinet
FortiWeb - Double free in pipe management
2023-02-16 00:00:00
prion
prion
Double free
2023-02-16 19:15:00
cnvd
cnvd
Fortinet FortiWeb Resource Management Error Vulnerability
2023-02-20 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2022-40683