CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow
Remote attackers can execute arbitrary code via crafted requests exploiting a heap-based buffer overflow in Fortinet SSL-VPN.
- Exploited in the wild
- Since 13 Jun 2023
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-27997?
CVE-2023-27997 is a critical memory corruption vulnerability in Fortinet Fortios, published on 13 Jun 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.
Which versions are affected by CVE-2023-27997?
It affects 2 products.
Products include Fortinet Fortios, Fortinet Fortiproxy.
How do I fix CVE-2023-27997?
No fix has been published for CVE-2023-27997 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 4 Jul 2023.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-27997 being exploited?
Yes. Attackers have exploited CVE-2023-27997 in the wild since at least 13 Jun 2023, including in ransomware campaigns.
Public exploit code: 12 proofs of concept on GitHub.
Other vulnerabilities in Fortinet Fortios
Sources
Also known as GHSA-2hj2-fcr9-9p35.