CVE-2022-42475: Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability.

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability. Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.

• CISA KEV-listed (remediation due 2023-01-03)
• used in ransomware campaigns
• EPSS 99.5% (99.9% percentile)
• CVSS 9.8 critical

Detection rules

• Exploitation Indicator Of CVE-2022-42475 high

Exploiting malware & tools

• COATHANGER
• BOLDMOVE

Browse the CVE database

Read the full analysis on IntelFusions