Tracker / CVE-2023-41675
CVE-2023-41675
Medium 5.3
A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 through 7.0.8 may allow an unauthenticated remote attacker to crash the WAD process via multiple crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection.
Affected products and versions
| fortinet | fortios · 7.0.0 → 7.0.10 |
|---|---|
| fortinet | fortios · 7.2.0 → 7.2.4 |
| fortinet | fortiproxy |
| fortinet | fortiproxy · 7.0.0 → 7.0.8 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.