A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated att
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.
Timeline
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- CVE published
- Record last updated
Affected versions
- Fortinet FortiOS
From 7.6.1 · through 7.6.6
- Fortinet FortiPAM
From 1.8.0 · through 1.8.4; From 1.7.0 · through 1.7.2; From 1.6.0 · through 1.6.2; From 1.5.0 · through 1.5.1; From 1.4.0 · through 1.4.3; From 1.3.0 · through 1.3.1; From 1.1.0 · through 1.1.2; From 1.0.0 · through 1.0.3
- Fortinet FortiProxy
From 7.6.0 · through 7.6.4; From 7.4.0 · through 7.4.11; From 7.2.0 · through 7.2.16; From 7.0.0 · through 7.0.23