Description
FortiOS SSL-VPN中存在一个基于堆栈的缓冲区溢出漏洞。此漏洞是由于对数据缺乏验证导致的。
FortiOS SSL-VPN 缓冲区溢出漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.tenable.com/blog/cve-2023-27997-heap-based-buffer-overflow-in-fortinet-fortios-and-fortiproxy-ssl-vpn-xortigate
https://zeropath.com/blog/cve-2025-57740-fortinet-ssl-vpn-rdp-bookmark-heap-overflow-summary
https://kudelskisecurity.com/research/critical-severity-buffer-overflow-0-day-vulnerability-in-fortinet-ssl-vpn-under-active-exploitation
https://www.tenablecloud.cn/plugins/nessus/177116
https://www.nics.nat.gov.tw/core_business/information-security_information_sharing/Vulnerability_Alert_Announcements/1243/
https://www.scribd.com/document/794660133/Fortinet-SSL-VPN%E7%BC%93%E5%86%B2%E5%8C%BA%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E-CVE-2022-42475-%E9%A2%84%E8%AD%A6%E9%80%9A%E7%9F%A5
https://www.sentinelone.com/vulnerability-database/cve-2020-12819/
https://industrialcyber.co/vulnerabilities/heap-based-buffer-overflow-vulnerability-in-fortinet-fortios-ssl-vpn-appliances-patches-available/
https://www.reddit.com/r/msp/comments/zkaifb/fortinet_vulnerability_affecting_fortios_sslvpn/
https://www.fortinet.com/blog/psirt-blogs/analysis-of-fg-ir-22-398-fortios-heap-based-buffer-overflow-in-sslvpnd
https://www.fortiguard.com/psirt/FG-IR-22-398
https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/CVE-2022-42475-Advisory.pdf
https://nvd.nist.gov/vuln/detail/cve-2022-42475