cbcvebase.
CVE-2023-29177
published 2023-11-14

CVE-2023-29177: Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 &…

medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
fortinetfortiadc
fortinetfortiadc
fortinetfortiadc
fortinetfortiadc
fortinetfortiadc
fortinetfortiadc
fortinetfortiadc
fortinetfortiadc
fortinetfortiadc
fortinetfortiadc5.2.0 – 5.2.8
fortinetfortiadc5.3.0 – 5.3.7
fortinetfortiadc5.4.0 – 5.4.5
fortinetfortiadc6.0.0 – 6.0.4
fortinetfortiadc6.1.0 – 6.1.6
fortinetfortiadc6.2.0 – 6.2.6
fortinetfortiadc7.0.0 – 7.0.5
fortinetfortiadc7.1.0 – 7.1.2
fortinetfortiddos
fortinetfortiddos-f
fortinetfortiddos-f
fortinetfortiddos-f
fortinetfortiddos-f
fortinetfortiddos-f6.1.0 – 6.1.4
fortinetfortiddos-f6.2.0 – 6.2.3
fortinetfortiddos-f6.3.0 – 6.3.4