CVE

CVE-2018-13383

P1⬤ KNOWN RANSOMWARE USE

Fortinet FortiOS and FortiProxy Out-of-bounds Write

Fortinet · FortiOS and FortiProxy

Date added (CISA)

2022-01-10

Remediation due

2022-07-10

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.