A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
PoC: CVE-2023-25610-mass
Mass RCE Exploiter for Fortinet(FortiOS/Fortiproxy) CVE-2023-25610
PoC: CVE-2023-25610
FortiOS 管理界面中的堆内存下溢导致远程代码执行
PoC: CVE-2023-25610
A critical buffer underwrite ('buffer underflow') vulnerability in FortiOS & FortiProxy interfaces may allow a remote unauthenticated attacker to execute arbitrary code and take full control of the impacted Product...
PoC: CVE-2023-25610
A critical buffer underwrite ('buffer underflow') vulnerability in FortiOS & FortiProxy interfaces may allow a remote unauthenticated attacker to execute arbitrary code on the device and take control of the impacted Product...
PoC: CVE-2023-25610-PoC
CVE-2023-25610 is an unauthenticated RCE which affects FortiOS and FortiProxy
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free