Format String Vulnerability in Fortinet FortiOS and FortiProxy
CVE-2023-29181
8.8HIGH
What is CVE-2023-29181?
A vulnerability exists in Fortinet's FortiOS and FortiProxy products, allowing an attacker to exploit externally-controlled format strings. This weakness spans multiple versions of FortiOS from 6.0.0 to 7.2.4 and FortiProxy from 1.0.0 to 7.2.4. Attackers can craft specific commands that may result in unauthorized code execution or command execution. Users of affected versions are encouraged to implement security measures to mitigate potential risks.
Affected Version(s)
FortiOS 7.2.0 <= 7.2.4
FortiOS 7.0.0 <= 7.0.11
FortiOS 6.4.0 <= 6.4.12