Stack-Based Buffer Overflow in Fortinet FortiOS Affects Multiple Versions
CVE-2023-46718

6.3MEDIUM

Key Information:

Vendor

Fortinet
Status
FortiOS
Fortiproxy
Vendor
CVE Published:
14 October 2025

What is CVE-2023-46718?

A stack-based buffer overflow vulnerability exists in Fortinet's FortiOS versions, allowing attackers to execute unauthorized code or commands through specifically crafted CLI commands. This serious security flaw impacts multiple versions of the FortiOS operating system, posing significant risks to affected systems if not addressed promptly. Users are encouraged to apply available patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

FortiOS 7.4.0 <= 7.4.1

FortiOS 7.2.0 <= 7.2.11

FortiOS 7.0.0 <= 7.0.17

References

https://fortiguard.fortinet.com/psirt/FG-IR-23-354

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2023-46718 : Stack-Based Buffer Overflow in Fortinet FortiOS Affects Multiple Versions