CVE-2023-42789

CriticalCVSS 9.8/10Last modified Jul 8, 2026

Description

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0.0 through 7.0.12, FortiProxy 2.0.0 through 2.0.13, FortiSASE 23.2.b allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
FortinetFortiProxy7.4.0; >= 7.2.0, <= 7.2.6; >= 7.0.0, <= 7.0.12; >= 2.0.0, <= 2.0.13
FortinetFortiSASE23.2.b
FortinetFortiOS>= 7.4.0, <= 7.4.1; >= 7.2.0, <= 7.2.5; >= 7.0.0, <= 7.0.12; >= 6.4.0, <= 6.4.14; >= 6.2.0, <= 6.2.15
fortinetfortios>= 7.4.0, <= 7.4.1; >= 7.2.0, <= 7.2.5; >= 7.0.0, <= 7.0.12; >= 6.4.0, <= 6.4.14; >= 6.2.0, <= 6.2.15
fortinetfortipam>= 1.1.0, <= 1.1.2; >= 1.0.0, <= 1.0.3
fortinetfortiproxy>= 7.2.0, <= 7.2.6; >= 7.0.0, <= 7.0.12; >= 2.0.0, <= 2.0.13
fortinetfortiproxy7.4.0

References

Timeline

Published
Mar 12, 2024
Last modified
Jul 8, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-42797.5This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker CVE-2023-427908.1A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.CVE-2023-427918.8A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 anCVE-2023-427926.5Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some CVE-2023-427939.8In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possibleCVE-2023-427945.9Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.8CVE-2023-427955.3Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11CVE-2023-427968.8A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V0CVE-2023-427977.2A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP-8050 MASTER MODULE (All versions < CPCI85 V0CVE-2023-427989.1AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI tools. An issue in versions 1.4.1 and below can lCVE-2023-427998.8Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer oveCVE-2023-42809.8An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the truste
CVE-2023-42789: Critical severity, CVSS 9.8 | Vulnix