Description (CNA)
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiSwitch | affected 7.6.0 through 7.6.6; affected 7.4.0 through 7.4.10; affected 7.2.0 through 7.2.10 |
| Fortinet / FortiSASE | affected 25.4.c |
| Fortinet / FortiPAM | affected 1.8.0 through 1.8.4; affected 1.7.0 through 1.7.2; affected 1.6.0 through 1.6.2; affected 1.5.0 through 1.5.1; affected 1.4.0 through 1.4.3; affected 1.3.0 through 1.3.1; affected 1.2.0; affected 1.1.0 through 1.1.2; affected 1.0.0 through 1.0.3 |
| Fortinet / FortiOS | affected 7.6.0 through 7.6.7; affected 7.4.0 through 7.4.12; affected 7.2.0 through 7.2.13; affected 7.0.0 through 7.0.19 |
| Fortinet / FortiProxy | affected 7.6.0 through 7.6.6; affected 7.4.0 through 7.4.14; affected 7.2.0 through 7.2.16; affected 7.0.0 through 7.0.23 |
CWE
CWE-415
References
ADP enrichment
No English description supplied.
No references supplied.