CVE-2023-25610

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-25610
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://fortiguard.com/psirt/FG-IR-23-001
Configurations

No configuration.

History

27 Mar 2025, 16:44

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de suscripción de búfer ('desbordamiento de búfer') en la interfaz administrativa de Fortinet FortiOS versión 7.2.0 a 7.2.3, versión 7.0.0 a 7.0.6, versión 6.4.0 a 6.4.11 y versión 6.2.12 y anteriores, FortiProxy versión 7.2.0 a 7.2.2, versión 7.0.0 a 7.0.8, versión 2.0.12 y anteriores y FortiOS-6K7K versión 7.0.5, versión 6.4.0 a 6.4.10 y versión 6.2.0 a 6.2.10 y anteriores permite a un atacante remoto no autenticado ejecutar código o comandos arbitrarios a través de solicitudes específicamente manipuladas.

24 Mar 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-24 16:15

Updated : 2025-03-27 16:44

NVD link : CVE-2023-25610

Mitre link : CVE-2023-25610

CVE.ORG link : CVE-2023-25610

JSON object : View

Products Affected

No product.

CWE
CWE-124

Buffer Underwrite ('Buffer Underflow')