漏洞描述
FortiOS SSL-VPN中存在一个基于堆栈的缓冲区溢出漏洞。此漏洞是由于对数据缺乏验证导致的。
FortiOS SSL-VPN 缓冲区溢出漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2015-1880: Fortinet FortiOS <=5.2.3 - Cross-Site Scripting
- POC CVE-2016-3978: Fortinet FortiOS - Open Redirect/Cross-Site Scripting
- POC CVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting
- POC CVE-2017-3131: FortiOS 5.4.0 to 5.6.0 - Cross-Site Scripting
- POC CVE-2017-3132: Fortinet FortiOS < 5.6.0 - Cross-Site Scripting
- POC CVE-2017-3133: Fortinet FortiOS < 5.6.0 - Cross-Site Scripting
- POC CVE-2018-13379: Fortinet FortiOS - Credentials Disclosure
- POC CVE-2018-13380: Fortinet FortiOS - Cross-Site Scripting
- POC CVE-2018-13379: Fortinet FortiOS - Credentials Disclosure
- POC CVE-2022-40684: Fortinet FortiOS admin 远程命令执行漏洞
- Fortinet FortiOS/FortiProxy 认证绕过漏洞
- CVE-2024-55591 FortiOS和FortiProxy存在身份验证绕过漏洞
- Fortinet FortiOS SSLVPN CVE-2024-21762 越界写漏洞