CVE-2023-28002

An improper validation of integrity check value vulnerability CWE-354 in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.12, 6.4 all versions, 6.2 all versions, 6.0 all versions and VMs may allow a local attacker with admin privileges to boot a malicious image on the device and bypass the filesyst...

CVE-2023-36641

CVE-2023-36641 is a DoS vulnerability caused by a numeric truncation error in Fortinet FortiProxy/FortiOS. Affected products include FortiProxy 1.0–2.0 and FortiOS 6.x–7.x, with exploits triggered by specially crafted HTTP requests. Red Hat, CNVD, and other sources corroborate the DoS impact and ...

CVE-2023-36641

A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1, all versions, FortiProxy 1.0 all versions, FortiOS version 7.4.0, FortiOS version 7.2.0 through 7.2.5,...

Fortinet FortiOS Security Vulnerabilities

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering, and anti-spam. A security...

PT-2023-7383

Name of the Vulnerable Software and Affected Versions FortiProxy versions 1.0 through 7.2.4 FortiProxy version 7.0.0 through 7.0.10 FortiOS version 6.0 through 7.4.0 FortiOS version 7.2.0 through 7.2.5 FortiOS version 7.0.0 through 7.0.12 Description A numeric truncation error in Fortinet...

DOS in headers management

...

CVE-2023-28002: Improper Validation of Integrity Check Value

An improper validation of integrity check value vulnerability CWE-354 in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.12, 6.4 all versions, 6.2 all versions, 6.0 all versions and VMs may allow a local attacker with admin privileges to boot a malicious image on the device and bypass the filesyst...

CVE-2023-36641: Numeric Truncation Error

A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1, all versions, FortiProxy 1.0 all versions, FortiOS version 7.4.0, FortiOS version 7.2.0 through 7.2.5,...

Bypass of root file system integrity checks at boot time on VM

...

Fortinet FortiProxy 安全漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, anti-virus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. FortiProxy is a web proxy soluti...

PT-2023-8535 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.4 through 7.0.13 FortiOS versions 7.2.0 through 7.2.6 FortiOS versions 7.4.0 through 7.4.1 Description: The issue is related to an improper certificate validation procedure in the FortiLink protocol implementation, allowing...

PT-2023-7382 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.0 through 7.2.3 FortiProxy versions 2.0 through 7.2 Description: The issue is related to an improper validation of integrity check value, which may allow a local attacker with admin privileges to boot a malicious image on t...

The vulnerability of the FortiOS operating system, related to the lack of protection for website structures, allows attackers to execute arbitrary code.

The vulnerability of the FortiOS operating system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the FortiOS operating system, related to the exposure of information through query strings, allows attackers to view open text passwords of deleted services such as RDP or VNC.

The vulnerability of the FortiOS operating system’s request method is related to the disclosure of information through the request strings. Exploiting this vulnerability allows a malicious actor to remotely access open text passwords of deleted services, such as RDP or VNC...

The vulnerability of software for scanning and controlling IPS engine applications in FortiOS systems arises from interpretational conflicts, allowing attackers to circumvent existing security restrictions.

The vulnerability of software for scanning and controlling IPS engine applications in FortiOS systems is related to the occurrence of interpretation conflicts. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the FortiOS operating system is related to deficiencies in access control, which allows attackers to circumvent existing access restrictions.

The vulnerability of the FortiOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass existing access restrictions...

The vulnerability of the FortiOS operating system, related to the use of memory after it is freed, allows a hacker to cause a malfunction in the WAD process.

The vulnerability of the FortiOS operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to cause a malfunction of the WAD process using specially created packages...

The vulnerability of the FortiOS operating system, related to authentication flaws, allows attackers to escalate their privileges.

The vulnerability of the FortiOS operating system is related to authentication deficiencies. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

Fortinet FortiOS Access Control Error Vulnerability (CNVD-2023-98189)

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An Access Control Error...

Fortinet Fortigate xss (FG-IR-23-104)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-104 advisory. - An improper neutralization of script-related html tags in a web page basic xss in Fortinet FortiOS 7.2.0 - 7.2.4 allows an...