FortiOS SSL-VPN pre-auth heap overflow (XORtigate, CVE-2023-27997) ยท updates https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997 A heap overflow in the FortiOS and FortiProxy SSL-VPN allowed pre-authentication remote code execution. Fortinet said it may have been exploited in a limited number of cases, and published it alongside its analysis of the Volt Typhoon campaign. en Tue, 13 Jun 2023 00:00:00 GMT FortiOS SSL-VPN pre-auth heap overflow (XORtigate, CVE-2023-27997): CISA adds CVE-2023-27997 to the KEV catalog https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997 https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997#2023-06-13-b0351512 Tue, 13 Jun 2023 00:00:00 GMT critical <p>FortiOS SSL-VPN pre-auth heap overflow (XORtigate, CVE-2023-27997): CISA adds CVE-2023-27997 to the KEV catalog</p> FortiOS SSL-VPN pre-auth heap overflow (XORtigate, CVE-2023-27997): Fortinet publishes FG-IR-23-097 and a blog post on exploitation and Volt Typhoon https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997 https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997#2023-06-12-a2b3931d Mon, 12 Jun 2023 00:00:00 GMT critical <p><a href="https://www.fortinet.com/blog/psirt-blogs/analysis-of-cve-2023-27997-and-clarifications-on-volt-typhoon-campaign">Source</a></p>