CVE-2022-42475: Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability.

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability. Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.

• CISA KEV-listed (remediation due 2023-01-03)
• used in ransomware campaigns
• EPSS 94.0% (99.9% percentile)

Detection rules

• Exploitation Indicator Of CVE-2022-42475 high

Browse the CVE database

Read the full analysis on IntelFusions