CVE-2023-27997
Last modified
CVE-2023-27997 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.. CISA has confirmed active exploitation in the wild. EPSS estimates a 85.69% chance of exploitation in the next 30 days.
Description
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Fortiproxy | >= 1.1.0, <= 1.1.6 |
| Fortinet | Fortiproxy | >= 1.2.0, <= 1.2.13 |
| Fortinet | Fortiproxy | >= 2.0.0, <= 2.0.12 |
| Fortinet | Fortiproxy | >= 7.0.0, <= 7.0.9 |
| Fortinet | Fortiproxy | >= 7.2.0, <= 7.2.3 |
| Fortinet | Fortios | >= 6.0.0, <= 6.0.16 |
| Fortinet | Fortios | >= 6.2.0, <= 6.2.13 |
| Fortinet | Fortios | >= 6.4.0, <= 6.4.12 |
| Fortinet | Fortios | >= 7.0.0, <= 7.0.11 |
| Fortinet | Fortios | >= 7.2.0, <= 7.2.4 |
| Fortinet | Fortios | >= 6.0.12, <= 6.0.16 |
| Fortinet | Fortios | >= 6.2.9, <= 6.2.13 |
| Fortinet | Fortios | 6.0.10 |
| Fortinet | Fortios | 6.2.4 |
| Fortinet | Fortios | 6.2.6 |
| Fortinet | Fortios | 6.2.7 |
| Fortinet | Fortios | 6.4.2 |
| Fortinet | Fortios | 6.4.6 |
| Fortinet | Fortios | 6.4.8 |
| Fortinet | Fortios | 6.4.10 |
| Fortinet | Fortios | 6.4.12 |
| Fortinet | Fortios | 7.0.5 |
| Fortinet | Fortios | 7.0.10 |
References
- https://fortiguard.com/psirt/FG-IR-23-097Vendor Advisory
- https://fortiguard.com/psirt/FG-IR-23-097Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27997US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-27997?
How severe is CVE-2023-27997?
How do I fix CVE-2023-27997?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-2799A vulnerability, which was classified as problematic, has be…9.8
- CVE-2023-27990The cross-site scripting (XSS) vulnerability in Zyxel ATP se…4.8
- CVE-2023-27991The post-authentication command injection vulnerability in t…8.8
- CVE-2023-27992The pre-authentication command injection vulnerability in th…9.8
- CVE-2023-27993A relative path traversal [CWE-23] in Fortinet FortiADC vers…7.1
- CVE-2023-27995A improper neutralization of special elements used in a temp…8.8
- CVE-2023-27998A lack of custom error pages vulnerability [CWE-756] in Fort…5.3
- CVE-2023-27999An improper neutralization of special elements used in an OS…7.8
- CVE-2023-2800Insecure Temporary File in GitHub repository huggingface/tra…4.7
- CVE-2023-28000An improper neutralization of special elements used in an OS…7.8
- CVE-2023-28001An insufficient session expiration in Fortinet FortiOS 7.0.0…9.8
- CVE-2023-28002An improper validation of integrity check value vulnerabilit…6.7
Are you affected by CVE-2023-27997?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST