Republished vendor advisory. This ICSA is a verbatim republication of Siemens ProductCERT SSA-832273 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA…
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Credit: Siemens ProductCERT
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2023-42789 | CWE-787 Out-of-bounds Write | 9.8 Critical |
CVE-2023-42789 A out-of-bounds write in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests. Mitigation: Set a non form-based authentication scheme (see https://fortiguard.fortinet.com/psirt/FG-IR-23-328) Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2024-23113 KEV | CWE-134 Use of Externally-Controlled Format String | 9.8 Critical |
CVE-2024-23113 A use of externally-controlled format string vulnerability [CWE-134] in FortiOS fgfmd daemon may allow a remote unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. Mitigation: For each interface, remove the fgfm access (see https://www.fortiguard.com/psirt/FG-IR-24-029) Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-44250 | CWE-269 Improper Privilege Management | 8.8 High |
CVE-2023-44250 An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 and 7.2.5 and in a FortiProxy HA cluster version 7.4.0 through 7.4.1 allows an authenticated attacker to perform elevated actions via crafted HTTP or HTTPS requests. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-42790 | CWE-121 Stack-based Buffer Overflow | 8.1 High |
CVE-2023-42790 A stack-based buffer overflow in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests. Mitigation: Set a non form-based authentication scheme (see https://fortiguard.fortinet.com/psirt/FG-IR-23-328) Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2024-23112 | CWE-639 Authorization Bypass Through User-Controlled Key | 8.0 High |
CVE-2024-23112 An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.1 through 7.0.13, 6.4.7 through 6.4.14, and FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 SSL-VPN may allow an authenticated attacker to gain access to another user’s bookmark via URL manipulation. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2024-23110 | CWE-121 Stack-based Buffer Overflow | 7.8 High |
CVE-2024-23110 A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted commands Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-41677 | CWE-522 Insufficiently Protected Credentials | 7.5 High |
CVE-2023-41677 A insufficiently protected credentials in Fortinet FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17 allows attacker to execute unauthorized code or commands via targeted social engineering attack Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-44487 KEV | CWE-400 Uncontrolled Resource Consumption | 7.5 High |
CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-46717 | CWE-287 Improper Authentication | 7.5 High |
CVE-2023-46717 An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA may allow a readonly user to gain read-write access via successive login attempts. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-46714 | CWE-121 Stack-based Buffer Overflow | 7.2 High |
CVE-2023-46714 A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privileged attacker over the administrative interface to execute arbitrary code or commands via crafted HTTP or HTTPs requests. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-36640 | CWE-134 Use of Externally-Controlled Format String | 6.7 Medium |
CVE-2023-36640 A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiPAM versions 1.0.0 through 1.0.3, FortiOS versions 7.2.0, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.16 allows attacker to execute unauthorized code or commands via specially crafted commands Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-38545 | CWE-122 Heap-based Buffer Overflow | 6.7 Medium |
CVE-2023-38545 This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the hostname to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that hostname can be is 255 bytes. If the hostname is detected to be longer than 255 bytes, curl switches to local name resolving and instead passes on the resolved address only to the proxy. Due to a bug, the local variable that means "let the host resolve the name" could get the wrong value during a slow SOCKS5 handshake, and contrary to the intention, copy the too long hostname to the target buffer instead of copying just the resolved address there. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-40721 | CWE-134 Use of Externally-Controlled Format String | 6.7 Medium |
CVE-2023-40721 A use of externally-controlled format string vulnerability in Fortinet FortiOS version 7.4.0 through 7.4.1 and before 7.2.6, FortiProxy version 7.4.0 and before 7.2.7, FortiPAM version 1.1.2 and before 1.0.3, FortiSwitchManager version 7.2.0 through 7.2.2 and before 7.0.2 allows a privileged attacker to execute arbitrary code or commands via specially crafted requests. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-45583 | CWE-134 Use of Externally-Controlled Format String | 6.7 Medium |
CVE-2023-45583 A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.5, 7.0.0 through 7.0.11, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6 FortiPAM versions 1.1.0, 1.0.0 through 1.0.3 FortiOS versions 7.4.0, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15 FortiSwitchManager versions 7.2.0 through 7.2.2, 7.0.0 through 7.0.2 allows attacker to execute unauthorized code or commands via specially crafted cli commands and http requests. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-46718 | CWE-121 Stack-based Buffer Overflow | 6.7 Medium |
CVE-2023-46718 A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted CLI commands. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-48784 | CWE-134 Use of Externally-Controlled Format String | 6.7 Medium |
CVE-2023-48784 A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 and below, version 7.0.14 and below, version 6.4.15 and below command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or commands via specially crafted requests. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-44247 | CWE-415 Double Free | 6.6 Medium |
CVE-2023-44247 A double free vulnerability [CWE-415] in Fortinet FortiOS before 7.0.0 may allow a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-42785 | CWE-476 NULL Pointer Dereference | 6.5 Medium |
CVE-2023-42785 A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.0 all versions allows attacker to trigger a denial of service via a crafted http request. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-42786 | CWE-476 NULL Pointer Dereference | 6.5 Medium |
CVE-2023-42786 A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.0 all versions allows attacker to trigger a denial of service via a crafted http request. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2024-40593 | CWE-522 Insufficiently Protected Credentials | 6.0 Medium |
CVE-2024-40593 A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiOS 7.6.0, FortiOS 7.4.4, FortiOS 7.2.7, FortiOS 7.0.14, FortiPortal 6.0 all versions may allow an authenticated admin to retrieve a certificate's private key via the device's admin shell. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2024-23662 | CWE-200 Exposure of Sensitive Information to an Unauthorized Actor | 5.3 Medium |
CVE-2024-23662 An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15 and 6.4.0 through 6.4.15 allows attacker to information disclosure via HTTP requests. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2024-26007 | CWE-703 Improper Check or Handling of Exceptional Conditions | 5.3 Medium |
CVE-2024-26007 An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2024-26011 | CWE-306 Missing Authentication for Critical Function | 5.3 Medium |
CVE-2024-26011 A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14, FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.0 through 7.0.3, FortiPortal version 6.0.0 through 6.0.14, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted packets. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-45586 | CWE-345 Insufficient Verification of Data Authenticity | 5.0 Medium |
CVE-2023-45586 An insufficient verification of data authenticity vulnerability [CWE-345] in FortiOS & FortiProxy SSL-VPN tunnel mode may allow an authenticated VPN user to send (but not receive) packets spoofing the IP of another user via crafted network packets. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-46715 | CWE-346 Origin Validation Error | 5.0 Medium |
CVE-2023-46715 An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and version 7.2.6 and below allows an authenticated IPSec VPN user with dynamic IP addressing to send (but not receive) packets spoofing the IP of another user via crafted network packets. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-47537 | CWE-295 Improper Certificate Validation | 4.8 Medium |
CVE-2023-47537 An improper certificate validation vulnerability in Fortinet FortiOS 7.0.0 - 7.0.13, 7.2.0 - 7.2.6 and 7.4.0 - 7.4.1 allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel between the FortiOS device and FortiSwitch. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2022-23439 | CWE-610 Externally Controlled Reference to a Resource in Another Sphere | 4.7 Medium |
CVE-2022-23439 A externally controlled reference to a resource in another sphere in Fortinet FortiManager before version 7.4.3, FortiMail before version 7.0.3, FortiAnalyzer before version 7.4.3, FortiVoice version 7.0.0, 7.0.1 and before 6.4.8, FortiProxy before version 7.0.4, FortiRecorder version 6.4.0 through 6.4.2 and before 6.0.10, FortiAuthenticator version 6.4.0 through 6.4.1 and before 6.3.3, FortiNDR version 7.2.0 before 7.1.0, FortiWLC before version 8.6.4, FortiPortal before version 6.0.9, FortiOS version 7.2.0 and before 7.0.5, FortiADC version 7.0.0 through 7.0.1 and before 6.2.3 , FortiDDoS before version 5.5.1, FortiDDoS-F before version 6.3.3, FortiTester before version 7.2.1, FortiSOAR before version 7.2.2 and FortiSwitch before version 6.3.3 allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2025-54822 | CWE-285 Improper Authorization | 4.3 Medium |
CVE-2025-54822 An improper authorization vulnerability [CWE-285] in Fortinet FortiOS version 7.4.0 through 7.4.1 and before 7.2.8 & Fortinet FortiProxy before version 7.4.8 allows an authenticated attacker to access static files of others VDOMs via crafted HTTP or HTTPS requests. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2022-45862 | CWE-613 Insufficient Session Expiration | 3.7 Low |
CVE-2022-45862 An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 all versions; FortiProxy 7.2 all versions, 7.0 all versions; FortiPAM 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions; FortiSwitchManager 7.2.1 and below, 7.0 all versions GUI may allow attackers to re-use websessions after GUI logout, should they manage to acquire the required credentials. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
| CVE-2023-38546 | CWE-73 External Control of File Name or Path | 3.7 Low |
CVE-2023-38546 This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a function call that duplicates en easy handle called [curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html). If a transfer has cookies enabled when the handle is duplicated, the cookie-enable state is also cloned - but without cloning the actual cookies. If the source handle did not read any cookies from a specific file on disk, the cloned version of the handle would instead store the file name as `none` (using the four ASCII letters, no quotes). Subsequent use of the cloned handle that does not explicitly set a source to load cookies from would then inadvertently load cookies from a file named `none` - if such a file exists and is readable in the current directory of the program using libcurl. And if using the correct file format of course. Vendor fix: Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information. Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2024-23113 | 9.8 Critical | Fortinet Multiple Products Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute … |
| CVE-2023-42789 | 9.3 Critical | Fortinet FortiProxy A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0… |
| CVE-2023-38545 | 8.8 High | curl curl This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy … |
| CVE-2023-44250 | 8.3 High | Fortinet FortiOS An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 and 7.2.5 and in a FortiProxy H… |
| CVE-2023-42790 | 7.7 High | Fortinet FortiProxy A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, Forti… |
| CVE-2023-41677 | 7.5 High | Fortinet FortiOS A insufficiently protected credentials in Fortinet FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13, 1.2.0 through 1… |
| CVE-2023-44487 | 7.5 High | IETF HTTP/2 HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). |
| CVE-2024-23110 | 7.4 High | Fortinet FortiOS A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0… |
| CVE-2024-23112 | 7.2 High | Fortinet FortiOS An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.1 throug… |
| CVE-2023-46714 | 6.8 Medium | Fortinet FortiOS A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privil… |
| CVE-2023-46717 | 6.7 Medium | Fortinet FortiOS An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when … |
| CVE-2023-44247 | 6.5 Medium | Fortinet FortiOS A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or commands … |
| CVE-2023-42785 | 6.4 Medium | Fortinet FortiOS A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.… |
| CVE-2023-42786 | 6.4 Medium | Fortinet FortiOS A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.… |
| CVE-2023-40721 | 6.3 Medium | Fortinet FortiPAM A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute arbitrary cod… |
| CVE-2023-46718 | 6.3 Medium | Fortinet FortiOS A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.… |
| CVE-2023-36640 | 6.2 Medium | Fortinet FortiOS A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS … |
| CVE-2023-45583 | 6.2 Medium | Fortinet FortiOS A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS … |
| CVE-2023-48784 | 6.1 Medium | Fortinet FortiOS A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6… |
| CVE-2024-40593 | 5.9 Medium | Fortinet FortiAnalyzer A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all version… |
| CVE-2024-26011 | 5.2 Medium | Fortinet FortiManager A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiMan… |
| CVE-2024-23662 | 5.0 Medium | Fortinet FortiOS An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2… |
| CVE-2024-26007 | 5.0 Medium | Fortinet FortiOS An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker … |
| CVE-2023-45586 | 4.7 Medium | Fortinet FortiProxy An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode version 7.4.0 through 7.4.1, versio… |
| CVE-2023-46715 | 4.7 Medium | Fortinet FortiProxy An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and version 7.2.6 and below allows an a… |
| CVE-2023-47537 | 4.4 Medium | Fortinet FortiOS An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.15, … |
| CVE-2025-54822 | 4.2 Medium | Fortinet FortiProxy An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 t… |
| CVE-2022-23439 | 4.1 Medium | Fortinet FortiTester A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP re… |
| CVE-2022-45862 | 3.5 Low | Fortinet FortiPAM An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 all versions; FortiProxy 7… |
| CVE-2023-38546 | — | curl curl This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl p… |
Named by the advisory itself. Each CVE links to its tracked detail page.
Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.