CVE-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow
Remote unauthenticated attackers can execute arbitrary code via crafted requests due to a heap-based buffer overflow in Fortinet SSL-VPN.
- Exploited in the wild
- Since 13 Dec 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-42475?
CVE-2022-42475 is a critical memory corruption vulnerability in Fortinet Fortios, published on 2 Jan 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
Which versions are affected by CVE-2022-42475?
It affects 2 products.
Products include Fortinet Fortios, Fortinet Fortiproxy.
How do I fix CVE-2022-42475?
No fix has been published for CVE-2022-42475 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 3 Jan 2023.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-42475 being exploited?
Yes. Attackers have exploited CVE-2022-42475 in the wild since at least 13 Dec 2022, including in ransomware campaigns.
Public exploit code: 9 proofs of concept on GitHub.
Other vulnerabilities in Fortinet Fortios
- CVE-2024-23113 Fortinet Multiple Products Format String
- CVE-2022-40684 Fortinet Multiple Products Authentication Bypass
- CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass
- CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write
- CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow
Sources
Also known as GHSA-p3vq-4cxh-gfp9.