CVE

CVE-2022-42475

P1⬤ KNOWN RANSOMWARE USE

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

Fortinet · FortiOS

Date added (CISA)

2022-12-13

Remediation due

2023-01-03

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.

Source: NVD ↗ · CISA KEV Catalog ↗