CVE-2023-46718: Stack-based buffer overflow on fortitoken import feature
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted CLI commands.
Other sources
A stack-based buffer overflow vulnerability [CWE-121] in FortiOS and FortiProxy may allow an authenticated attacker to achieve arbitrary code execution via certain CLI commands.
— FortiGuard
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46718?
CVE-2023-46718 is classified as a critical vulnerability due to the possibility of remote code execution.
How do I fix CVE-2023-46718?
To mitigate CVE-2023-46718, upgrade Fortinet FortiOS to version 7.4.2 or later or to 7.2.12 or later.
Which Fortinet FortiOS versions are affected by CVE-2023-46718?
CVE-2023-46718 affects FortiOS versions from 6.0.13 to 7.4.1.
Can CVE-2023-46718 be exploited remotely?
Yes, CVE-2023-46718 can be exploited remotely, allowing unauthorized code execution.
Is there a workaround for CVE-2023-46718?
There are no official workarounds for CVE-2023-46718; it is recommended to apply the available patches.