Record status Published
Identifier year (not publication year) 2023
Source publication Mar 24, 2025
Source updated Mar 24, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
FortiSwitchManager
Vendor Fortinet
Product FortiSwitchManager
Platforms Unknown
Default status unaffected
FortiSwitchManager · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 7.2.0 affectedsemver Unavailable 7.2.1 None listed 7.0.0 affectedsemver Unavailable 7.0.1 None listed
FortiAnalyzer
Vendor Fortinet
Product FortiAnalyzer
Platforms Unknown
Default status unaffected
FortiAnalyzer · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 7.2.0 affectedUnavailable Unavailable Unavailable None listed 7.0.0 affectedsemver Unavailable 7.0.4 None listed 6.4.0 affectedsemver Unavailable 6.4.11 None listed 6.2.0 affectedsemver Unavailable 6.2.10 None listed 6.0.0 affectedsemver Unavailable 6.0.11 None listed
FortiOS-6K7K
Vendor Fortinet
Product FortiOS-6K7K
Platforms Unknown
Default status unaffected
FortiOS-6K7K · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 7.0.5 affectedUnavailable Unavailable Unavailable None listed 6.4.10 affectedUnavailable Unavailable Unavailable None listed 6.4.8 affectedUnavailable Unavailable Unavailable None listed 6.4.6 affectedUnavailable Unavailable Unavailable None listed 6.4.2 affectedUnavailable Unavailable Unavailable None listed 6.2.9 affectedsemver Unavailable 6.2.12 None listed 6.2.6 affectedsemver Unavailable 6.2.7 None listed 6.2.4 affectedUnavailable Unavailable Unavailable None listed 6.0.12 affectedsemver Unavailable 6.0.18 None listed 6.0.10 affectedUnavailable Unavailable Unavailable None listed
FortiProxy
Vendor Fortinet
Product FortiProxy
Platforms Unknown
Default status unaffected
FortiProxy · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 7.2.0 affectedsemver Unavailable 7.2.2 None listed 7.0.0 affectedsemver Unavailable 7.0.8 None listed 2.0.0 affectedsemver Unavailable 2.0.14 None listed 1.2.0 affectedsemver Unavailable 1.2.13 None listed 1.1.0 affectedsemver Unavailable 1.1.6 None listed
FortiOS
Vendor Fortinet
Product FortiOS
Platforms Unknown
Default status unaffected
FortiOS · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 7.2.0 affectedsemver Unavailable 7.2.3 None listed 7.0.0 affectedsemver Unavailable 7.0.9 None listed 6.4.0 affectedsemver Unavailable 6.4.11 None listed 6.2.0 affectedsemver Unavailable 6.2.12 None listed 6.0.0 affectedsemver Unavailable 6.0.18 None listed 5.6.0 affectedsemver Unavailable 5.6.14 None listed 5.4.0 affectedsemver Unavailable 5.4.13 None listed 5.2.0 affectedsemver Unavailable 5.2.15 None listed 5.0.0 affectedsemver Unavailable 5.0.14 None listed
FortiManager
Vendor Fortinet
Product FortiManager
Platforms Unknown
Default status unaffected
FortiManager · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 7.2.0 affectedUnavailable Unavailable Unavailable None listed 7.0.0 affectedsemver Unavailable 7.0.4 None listed 6.4.0 affectedsemver Unavailable 6.4.11 None listed 6.2.0 affectedsemver Unavailable 6.2.10 None listed 6.0.0 affectedsemver Unavailable 6.0.11 None listed
FortiWeb
Vendor Fortinet
Product FortiWeb
Platforms Unknown
Default status unaffected
FortiWeb · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 7.2.0 affectedsemver Unavailable 7.2.1 None listed 7.0.0 affectedsemver Unavailable 7.0.6 None listed 6.4.0 affectedsemver Unavailable 6.4.2 None listed 6.3.0 affectedsemver Unavailable 6.3.22 None listed 6.2.0 affectedsemver Unavailable 6.2.7 None listed 6.1.0 affectedsemver Unavailable 6.1.3 None listed