CVE-2022-43953: High severity fortinet fortiproxy ssl vpn webmode vulnerability
A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7 allows attacker to execute unauthorized code or commands via specially crafted commands.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-43953?
CVE-2022-43953 is a vulnerability that allows an attacker to execute unauthorized code or cause a denial of service through a use of externally-controlled format string in Fortinet FortiOS and FortiProxy.
Which versions of Fortinet FortiOS are affected by CVE-2022-43953?
Fortinet FortiOS versions 7.2.0 through 7.2.4, all versions 7.0, all versions 6.4, and all versions 6.2 are affected by CVE-2022-43953.
Which versions of FortiProxy are affected by CVE-2022-43953?
FortiProxy versions 7.2.0 through 7.2.1 and versions 7.0.0 through 7.0.7 are affected by CVE-2022-43953.
What is the severity rating of CVE-2022-43953?
CVE-2022-43953 has a severity rating of 7.8 (High).
How can the CVE-2022-43953 vulnerability be exploited?
An attacker can exploit the CVE-2022-43953 vulnerability by using an externally-controlled format string to execute unauthorized code or cause a denial of service.