Stack-Based Buffer Overflow in Fortinet FortiOS Enables Remote Code Execution
A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 up to and including 7.2.8 and version 7.4.0 up to and including 7.4.4 allows a remote unauthenticated malicious user to execute arbitrary code or commands via crafted UDP packets through the CAPWAP control, provided the attacker were able to evade FortiOS stack protections and provided the fabric service is running on the exposed interface.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
fortinet fortios 7.4.4 |
||
fortinet fortios 7.4.3 |
||
fortinet fortios 7.4.2 |
||
fortinet fortios 7.4.1 |
||
fortinet fortios 7.4.0 |
||
fortinet fortios 7.2.8 |
||
fortinet fortios 7.2.7 |
||
fortinet fortios 7.2.6 |
||
fortinet fortios 7.2.5 |
||
fortinet fortios 7.2.4 |
||
fortinet fortios |
Vulmon