References https://www.fortiguard.com/psirt/FG-IR-22-398 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 https://blog.nsfocus.net/fortinet-fortios-sslvpndcve-2022-42475/ https://avd.aliyun.com/detail?id=AVD-2022-42475 https://www.fortinet.com/blog/psirt-blogs/analysis-of-fg-ir-22-398-fortios-heap-based-buffer-overflow-in-sslvpnd https://github.com/P4x1s/CVE-2022-42475-RCE-POC https://qkl.seebug.org/vuldb/ssvid-99658 https://bishopfox.com/blog/exploit-cve-2022-42475 https://www.venustech.com.cn/new_type/aqtg/20221213/24923.html https://wzt.ac.cn/2022/12/15/CVE-2022-42475/
Related VulnerabilitiesPoCCVE-2019-5591: FortiOS - Insecure LDAP Configuration DetectionFortinet FortiOS等 签名验证不当漏洞PoCCVE-2022-42475: Fortinet SSL-VPN - Heap-Based Buffer OverflowPoCCVE-2015-1880: Fortinet FortiOS <=5.2.3 - Cross-Site ScriptingPoCCVE-2016-3978: Fortinet FortiOS - Open Redirect/Cross-Site ScriptingPoCCVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal - Cross-Site ScriptingPoCCVE-2017-3131: FortiOS 5.4.0 to 5.6.0 - Cross-Site ScriptingPoCCVE-2017-3132: Fortinet FortiOS < 5.6.0 - Cross-Site ScriptingPoCCVE-2017-3133: Fortinet FortiOS < 5.6.0 - Cross-Site ScriptingPoCCVE-2018-13379: Fortinet FortiOS - Credentials DisclosurePoCCVE-2018-13380: Fortinet FortiOS - Cross-Site Scripting