Lucene search

PRIOn knowledge basePRION:CVE-2023-29177

HistoryNov 14, 2023 - 7:15 p.m.

Buffer overflow

2023-11-1419:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

buffer overflow

fortiadc

fortiddos-f

cwe-120

arbitrary code execution

cli requests.

8.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Multiple buffer copy without checking size of input (‘classic buffer overflow’) vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests.

CPENameOperatorVersion
fortiadceq7.2.0
fortiadcge7.1.0
fortiadcle7.1.2
fortiadceq7.0.0
fortiadceq6.0.0
fortiadceq5.3.0
fortiadceq5.4.0
fortiadceq6.1.0
fortiadceq5.2.0
fortiadceq6.2.0

Name	Operator	Version
fortiadc	eq	7.2.0
fortiadc	ge	7.1.0
fortiadc	le	7.1.2
fortiadc	eq	7.0.0
fortiadc	eq	6.0.0
fortiadc	eq	5.3.0
fortiadc	eq	5.4.0
fortiadc	eq	6.1.0
fortiadc	eq	5.2.0
fortiadc	eq	6.2.0

Rows per page:

1-10 of 171

References

fortiguard.com/psirt/FG-IR-23-064