CVE-2023-37930 | THREATINT

Description

Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests.

PUBLISHED Reserved 2023-07-11 | Published 2025-04-08 | Updated 2026-02-26 | Assigner fortinet

MEDIUM: 6.7CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Problem types

Execute unauthorized code or commands

Product status

Default status

unaffected

7.2.0 (semver)

affected

7.0.0 (semver)

affected

Default status

unaffected

7.4.0

affected

7.2.0 (semver)

affected

7.0.1 (semver)

affected

6.4.7 (semver)

affected

References

fortiguard.com/psirt/FG-IR-23-165

cve.org (CVE-2023-37930)

nvd.nist.gov (CVE-2023-37930)

Download JSON