https://pwn.watch/t/volt-typhoon Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 13 Jun 2023 00:00:00 GMT https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997 https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997 Tue, 13 Jun 2023 00:00:00 GMT critical <p>A heap overflow in the FortiOS and FortiProxy SSL-VPN allowed pre-authentication remote code execution. Fortinet said it may have been exploited in a limited number of cases, and published it alongside its analysis of the Volt Typhoon campaign.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory FG-IR-23-097</p> <p><strong>Latest updates:</strong></p><ul><li>2023-06-13: CISA adds CVE-2023-27997 to the KEV catalog</li><li>2023-06-12: Fortinet publishes FG-IR-23-097 and a blog post on exploitation and Volt Typhoon (<a href="https://www.fortinet.com/blog/psirt-blogs/analysis-of-cve-2023-27997-and-clarifications-on-volt-typhoon-campaign">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2023-27997</p>