VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Nov 14, 2023· Updated Jun 17, 2026

CVE-2023-29177

CVE-2023-29177

Description

Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests.

Affected products

17
  • Fortinet/Fortiadc 200d10 versions
    cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*range: >=7.1.0,<=7.1.2
    • cpe:2.3:a:fortinet:fortiadc:5.2.0:-:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:5.3.0:-:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:5.4.0:-:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:6.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:6.1.0:-:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:6.2.0:-:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.2.0
  • Fortinet/Fortiddos F6 versions
    cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*range: >=6.1.0,<=6.1.4
    • cpe:2.3:a:fortinet:fortiddos-f:6.2.0:-:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiddos-f:6.3.0:-:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiddos-f:6.5.0:*:*:*:*:*:*:*
    • (no CPE)range: <=6.5.0 and <6.4.1
    • (no CPE)range: 6.5.0
  • Fortinet/FortiADC-Ellm-fuzzy
    Range: <=7.2.0 and <7.1.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.