← Back to CVE List
Vulnerability Intelligence Report
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

CVE-2023-27997

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.

CISA KEV SSVC: Active Exploitation Automatable
CVSS Base Score
9.2
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:85.69%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Weaknesses (CWE)

CWE-122 ↗Execute unauthorized code or commands

Affected Products & Versions

Vendor Product Affected Versions
Fortinet FortiOS-6K7K 7.0.10 (affected), 7.0.5 (affected), 6.4.12 (affected), 6.4.10 (affected), 6.4.8 (affected), 6.4.6 (affected), 6.4.2 (affected), 6.2.9 <= 6.2.13 (affected), 6.2.6 <= 6.2.7 (affected), 6.2.4 (affected), 6.0.12 <= 6.0.16 (affected), 6.0.10 (affected)
Fortinet FortiProxy 7.2.0 <= 7.2.3 (affected), 7.0.0 <= 7.0.9 (affected), 2.0.0 <= 2.0.12 (affected), 1.2.0 <= 1.2.13 (affected), 1.1.0 <= 1.1.6 (affected)
Fortinet FortiOS 7.2.0 <= 7.2.4 (affected), 7.0.0 <= 7.0.11 (affected), 6.4.0 <= 6.4.12 (affected), 6.2.0 <= 6.2.13 (affected), 6.0.0 <= 6.0.16 (affected)

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

CISA KEV
ACTIVE IN CATALOG
EPSS Score
85.689%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityFortinet, Inc. · Vendor · USA
Reserved2023-03-09T10:09:33
Published2023-06-13T08:41:47
Last Updated2026-07-31T03:55:27

LINK COPIED TO CLIPBOARD