Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests.
References
| Link | Resource |
|---|---|
| https://fortiguard.com/psirt/FG-IR-23-064 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2023, 18:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:fortinet:fortiadc:6.0.0:-:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiadc:7.0.0:-:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiddos-f:6.3.0:-:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiadc:5.4.0:-:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiadc:6.2.0:-:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiadc:5.3.0:-:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiddos-f:6.5.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiadc:6.1.0:-:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiddos-f:6.2.0:-:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiadc:5.2.0:-:*:*:*:*:*:* |
|
| References | () https://fortiguard.com/psirt/FG-IR-23-064 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.7 |
| First Time |
Fortinet
Fortinet fortiadc Fortinet fortiddos-f |
14 Nov 2023, 19:30
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-14 19:15
Updated : 2023-12-10 15:26
NVD link : CVE-2023-29177
Mitre link : CVE-2023-29177
CVE.ORG link : CVE-2023-29177
JSON object : View
Products Affected
fortinet
- fortiadc
- fortiddos-f
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')