A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
References
| Link | Resource |
|---|---|
| https://fortiguard.com/psirt/FG-IR-22-398 | Exploit Mitigation Vendor Advisory |
| https://fortiguard.com/psirt/FG-IR-22-398 | Exploit Mitigation Vendor Advisory |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475 | US Government Resource |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
| AND |
|
History
24 Oct 2025, 12:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475 - US Government Resource |
22 Oct 2025, 00:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Oct 2025, 20:19
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Oct 2025, 19:19
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2023-01-02 09:15
Updated : 2025-10-24 12:54
NVD link : CVE-2022-42475
Mitre link : CVE-2022-42475
CVE.ORG link : CVE-2022-42475
JSON object : View
Products Affected
fortinet
- fortigate-6300f
- fim-7941f
- fortigate-6300f-dc
- fpm-7630e
- fortigate-6500f-dc
- fortigate-7040e
- fortios
- fortiproxy
- fortigate-7060e
- fortigate-7030e
- fpm-7620f
- fim-7901e
- fim-7904e
- fortigate-7121f
- fortigate-6601f-dc
- fortigate-6501f
- fpm-7620e
- fortigate-6500f
- fim-7910e
- fim-7921f
- fortigate-6501f-dc
- fortigate-6601f
- fim-7920e