CVE-2023-29177

published 2023-11-14

CVE-2023-29177: Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 &…

Priority P4 30 medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests.

Affected

26 ranges · showing 25

Vendor	Product	Version range	Fixed in
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	5.2.0 – 5.2.8	—
fortinet	fortiadc	5.3.0 – 5.3.7	—
fortinet	fortiadc	5.4.0 – 5.4.5	—
fortinet	fortiadc	6.0.0 – 6.0.4	—
fortinet	fortiadc	6.1.0 – 6.1.6	—
fortinet	fortiadc	6.2.0 – 6.2.6	—
fortinet	fortiadc	7.0.0 – 7.0.5	—
fortinet	fortiadc	7.1.0 – 7.1.2	—
fortinet	fortiddos	—	—
fortinet	fortiddos-f	—	—
fortinet	fortiddos-f	—	—
fortinet	fortiddos-f	—	—
fortinet	fortiddos-f	—	—
fortinet	fortiddos-f	6.1.0 – 6.1.4	—
fortinet	fortiddos-f	6.2.0 – 6.2.3	—
fortinet	fortiddos-f	6.3.0 – 6.3.4	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-120