Lucene search
HistoryMay 14, 2024 - 5:15 p.m.
CVE-2023-44247
fortinet fortios
double free vulnerability
cwe-415
crafted requests
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.4%
A double free vulnerability [CWE-415] in Fortinet FortiOS before 7.0.0 may allow a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.
Affected configurations
Node
fortinetfortiosRange6.2.0–6.2.16
ORfortinetfortiosRange6.4.0–6.4.15
References
Related
cve
cve
CVE-2023-44247
2024-05-14 17:15:20
vulnrichment
vulnrichment
CVE-2023-44247
2024-05-14 16:19:13
cvelist
cvelist
CVE-2023-44247
2024-05-14 16:19:13
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.4%
Related for NVD:CVE-2023-44247