VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 8, 2025· Updated Jun 17, 2026

CVE-2023-37930

CVE-2023-37930

Description

Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests.

Affected products

5
  • Fortinet/Fortiproxy2 versions
    cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*range: >=7.0.0,<7.0.13
    • cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*range: 7.2.0
  • Fortinet/Fortios2 versions
    cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*range: >=6.4.7,<6.4.15
    • cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*
  • Fortinet/VPNllm-create

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.