Jun 12, 2023
1 new incident, 0 with updates.
Started
- ClosedPatched
FortiOS SSL-VPN pre-auth heap overflow (XORtigate, CVE-2023-27997)
A heap overflow in the FortiOS and FortiProxy SSL-VPN allowed pre-authentication remote code execution. Fortinet said it may have been exploited in a limited number of cases, and published it alongside its analysis of the Volt Typhoon campaign.
Fortinet FortiOS and FortiProxy SSL-VPNClosed Jun 13, 2023