high7.5
CVE-2023-37930
Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VP…
Impact
Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortios | from 6.4.7 before 6.4.15 from 7.0.1 before 7.0.13 from 7.2.0 before 7.2.6 Version 7.4.0 |
| Fortinet | Fortiproxy | from 7.0.0 before 7.0.13 from 7.2.0 before 7.2.7 |