The vulnerability results from the receipt of a crafted Outlook MSG file where the "PidLidReminderFileParameter" - a message property that accepts a universal naming convention (UNC) path - is set to an attacker-controlled resource.

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request.

A heap-based buffer overflow vulnerability in FortiOS SSL VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

An MSI signed with an invalid authenticode signature bypasses the SmartScreen Security Warning dialog.

Threat Encyclopedia

1232367

FILE Microsoft Outlook Elevation of Privilege Vulnerability (CVE-2023-23397)

Critical

2023/03/16

1232248

WEB FortiNAC keyUpload Scriptlet Arbitrary File Write (CVE-2022-39952)

Critical

2023/03/15

1232132

WEB Fortinet FortiOS SSL VPN Heap Buffer Overflow (CVE-2022-42475)

Critical

2023/03/15

1232342

FILE Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-24880) state 1-F/Flow

High

2023/03/15