CVE-2023-36640: Format String Bug in cli command

Q: What is the severity of CVE-2023-36640?

CVE-2023-36640 is classified as a medium-severity vulnerability due to the potential for remote code execution via format string manipulation.

Q: How do I fix CVE-2023-36640?

To mitigate CVE-2023-36640, upgrade Fortinet FortiProxy versions to at least 7.2.6 or FortiOS to at least 7.2.6.

Q: Which Fortinet products are affected by CVE-2023-36640?

CVE-2023-36640 affects multiple versions of Fortinet FortiProxy, FortiOS, and FortiPAM.

Q: What are the impacted versions for FortiProxy related to CVE-2023-36640?

FortiProxy versions 7.2.0 through 7.2.4 and 7.0.0 through 7.0.10 are impacted by CVE-2023-36640.

Q: Is there a patch available for CVE-2023-36640?

Yes, patches for CVE-2023-36640 are available in the form of version upgrades for affected Fortinet products.

Published May 14, 2024

Updated

A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0.0 through 6.0.16, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.5, FortiProxy 7.0.0 through 7.0.11, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions allows attacker to execute unauthorized code or commands via specially crafted commands

Other sources

Multiple format string bug vulnerabilitues [CWE-134] in FortiOS, FortiProxy, FortiPAM & FortiSwitchManager command line interpreter and httpd may allow an authenticated attacker to achieve arbitrary code execution via specifically crafted commands and http requests.

— FortiGuard

Affected Software

28 affected componentsFixes available

Fortinet FortiProxy>=1.0.0<=1.0.7

Fortinet FortiProxy>=1.1.0<=1.1.6

Fortinet FortiProxy>=1.2.0<=1.2.13

Fortinet FortiProxy>=2.0.0<=2.0.14

Fortinet FortiProxy>=7.0.0<=7.0.10

Fortinet FortiProxy>=7.2.0<=7.2.4

Fortinet FortiPAM<=1.0.3

Fortinet FortiOS>=6.0.0<=6.0.16

Fortinet FortiOS>=6.2.0<=6.2.16

Fortinet FortiOS>=6.4.0<=6.4.14

Fortinet FortiOS>=7.0.0<=7.0.12

Fortinet FortiOS=7.2.0

Fortinet FortiOS=.

Fortinet FortiOS>=7.2.0<=7.2.5

Fortinet FortiOS>=7.0

Fortinet FortiOS>=6.4

Fortinet FortiOS>=6.2

Fortinet FortiOS>=6.0.0<=6.0.16

Fortinet FortiPAM=.

Fortinet FortiPAM>=1.0

Fortinet FortiProxy>=7.2.0<=7.2.5

Fortinet FortiProxy>=7.0.0<=7.0.11

Fortinet FortiProxy>=2.0

Fortinet FortiProxy>=1.2

Fortinet FortiProxy>=1.1

Fortinet FortiProxy>=1.0

Fortinet FortiSwitchManager>=7.2.0<=7.2.2

Fortinet FortiSwitchManager>=7.0.0<=7.0.2

Remediation

Information

Upgrade to FortiSwitchManager version 7.2.3 or above Upgrade to FortiSwitchManager version 7.0.3 or above Fortinet remediated this issue in FortiSASE version 22.4 and hence customers do not need to perform any action. Upgrade to FortiOS version 7.4.1 or above Upgrade to FortiOS version 7.2.6 or above Upgrade to FortiPAM version 1.1.1 or above Upgrade to FortiProxy version 7.2.6 or above Upgrade to FortiProxy version 7.0.12 or above

Event History

May 14, 2024

Advisory Published

via FortiGuard·12:00 AM

CVE Published

via MITRE·04:19 PM

Data Sourced

via MITRE·04:19 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Oct 23, 2024

Advisory Published

via FortiGuard·12:00 AM

Frequently Asked Questions

What is the severity of CVE-2023-36640?

CVE-2023-36640 is classified as a medium-severity vulnerability due to the potential for remote code execution via format string manipulation.

How do I fix CVE-2023-36640?

To mitigate CVE-2023-36640, upgrade Fortinet FortiProxy versions to at least 7.2.6 or FortiOS to at least 7.2.6.

Which Fortinet products are affected by CVE-2023-36640?