CVE-2022-40683: Double Free
Published Feb 16, 2023
·Updated
A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands
Affected Software
1 affected component
Fortinet FortiWeb>=7.0.0<=7.0.3
Remediation
Patch Available
Information
Please upgrade to FortiWeb version 7.2.0 or above Please upgrade to FortiWeb version 7.0.4 or above
Event History
Feb 16, 2023
CVE Published
via MITRE·06:07 PM
Data Sourced
via MITRE·06:07 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-40683.
2
What is the severity of CVE-2022-40683?
The severity of CVE-2022-40683 is high.
3
Which software versions are affected by CVE-2022-40683?
Fortinet FortiWeb versions 7.0.0 through 7.0.3 are affected by CVE-2022-40683.
4
How can an attacker exploit CVE-2022-40683?
An attacker can exploit CVE-2022-40683 by executing unauthorized code or commands via specially crafted commands.
5
Is there a fix available for CVE-2022-40683?
Please refer to the official Fortinet FortiWeb advisories for the fix of CVE-2022-40683.