Disclosure summary
Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.
CISA remediation guidance
Apply updates per vendor instructions.
Original records & references
PUBLISHED 2022-12-13T00:00:00-05:00
MODIFIED 2022-12-13T00:00:00-05:00
INGESTED 2026-10-06T11:42:58-04:00