VYPR
← All advisories
Unrated severityCISA KEVNVD Advisory· Published Jan 2, 2023· Updated Oct 21, 2025

CVE-2022-42475

CVE-2022-42475

Description

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Affected products

4
  • Fortinet/Fortiproxyllm-fuzzy2 versions
    <=7.2.1+ 1 more
    • (no CPE)range: <=7.2.1
    • (no CPE)range: 7.2.0
  • Fortinet/Fortiosllm-fuzzy2 versions
    >=6.0.15 <=7.2.2+ 1 more
    • (no CPE)range: >=6.0.15 <=7.2.2
    • (no CPE)range: 7.2.0

Patches

Vulnerability mechanics

References

1

News mentions

2