WEB Fortinet FortiOS SSL VPN Heap Buffer Overflow (CVE-2022-42475)

Rule ID

1232132

Severity

Critical

Description

A heap-based buffer overflow vulnerability in FortiOS SSL VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

Buffer Overflow

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

Reference

Keyword

N/A