Description (CNA)
Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiProxy | affected 7.2.0 through 7.2.6; affected 7.0.0 through 7.0.12 |
| Fortinet / FortiOS | affected 7.4.0; affected 7.2.0 through 7.2.5; affected 7.0.1 through 7.0.11; affected 6.4.7 through 6.4.14 |
CWE
CWE-908
References
ADP enrichment
No English description supplied.
No references supplied.