CVE-2023-33307: NULL Pointer Dereference

A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter...

Fortinet Fortigate Heap buffer overflow in sslvpn pre-authentication (FG-IR-23-097)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-097 advisory. - A heap-based buffer overflow vulnerability CWE-122 in FortiOS version 7.2.4 and below, version 7.0.11 and below, version...

Open redirect in sslvpnd

...

Exploit for Out-of-bounds Write in Fortinet Fortios

cve-2022-42475 POC code to exploit the Heap overflow in Fortin...

SonicWall SonicOS Security Misconfiguration (SNWLID-2023-0005)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by a security misconfiguration vulnerability, due to improper restriction of excessive MFA attempts in the SonicOS SSLVPN interface, which may allow a remote authenticated attack...

PT-2023-1862 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.4.11 and earlier, 7.0.0 through 7.0.9, 7.2.0 through 7.2.3 FortiProxy versions 2.0.11 and earlier, 7.0.0 through 7.0.7, 7.2.0 through 7.2.1 Description: The issue is related to an access of uninitialized pointer vulnerabili...

CVE-2023-1101

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes...

Design/Logic Flaw

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes...

SonicOS SSLVPN Improper Restriction of Excessive MFA Attempts Vulnerability

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes. CVE: CVE-2023-1101 Last updated: March 28, 2023, 11:32 a.m...

CVE-2023-1101

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes...

PT-2023-16755

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description The issue concerns an improper restriction of excessive MFA attempts in SonicOS SSLVPN, allowing an authenticated attacker to use excessive MFA codes. Recommendations At the moment, there is ...

CVE-2023-1101

SonicWall SonicOS SSLVPN is affected by CVE-2023-1101 due to an improper restriction of excessive MFA attempts. The vulnerability allows an authenticated attacker to submit many MFA codes, leading to potential abuse of MFA workflow. Connected sources (e.g., SonicWall PSIRT SNWLID-2023-0005) confi...

CVE-2023-1101: Improper Restriction of Excessive Authentication Attempts

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes...

Exploit for Out-of-bounds Write in Fortinet Fortios

cve-2022-42475 POC code to exploit the Heap overflow in For...

Fortinet FortiOS SSLVPN Remote Code Execution Vulnerability

Fortinet FortiOS is a security operating system from Fortinet, a US-based company dedicated to the FortiGate network security platform. The system provides users with a variety of security features such as firewall, anti-virus, VPN, Web content filtering and anti-spam.Fortinet FortiOS SSLVPN remo...

FortiClient (MAC) - FortiTray stores the SSLVPN password in cleartext

An exposure of sensitive information to an unauthorized actor vulnerabiltiy CWE-200 in FortiClient for Mac may allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal...

CVE-2022-29055

A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenticated attacker to crash the sslvpn daemon via a...

Cross site request forgery (csrf)

A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenticated attacker to crash the sslvpn daemon via a...

Fortinet FortiOS Command Execution Vulnerability

Fortinet FortiOS is a security operating system dedicated to the FortiGate network security platform from Fortinet, a US-based company. The system provides users with a variety of security features such as firewall, anti-virus, IPSec/SSLVPN, Web content filtering and anti-spam.Fortinet FortiOS ha...

CVE-2022-29055

A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenticated attacker to crash the sslvpn daemon via a...