CVE-2023-42789
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.3epss 3.3%
from disclosure to weapon16 days
Published on NVDMar 12
1st PoC+16d
exploitation probability
3.3%top 13% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0.0 through 7.0.12, FortiProxy 2.0.0 through 2.0.13, FortiSASE 23.2.b allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
public PoCs found — 1
githubgithub.com/jhonnybonny/CVE-2023-42789★ 1⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.