PT-2023-28043 · Fortinet · Fortipam+1

Published 2023-12-12 · Updated 2023-12-15 · CVE-2023-41678

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 7.0.0 through 7.0.5 FortiPAM versions 1.0.0 through 1.0.3 FortiPAM versions 1.1.0 through 1.1.1

Description A double free in Fortinet FortiOS and FortiPAM allows an attacker to execute unauthorized code or commands via a specifically crafted request. This issue affects the HTTPSd daemon and can be exploited by an authenticated attacker to achieve arbitrary code execution.

Recommendations For Fortinet FortiOS versions 7.0.0 through 7.0.5, update to a version that contains a fix for this issue. For FortiPAM versions 1.0.0 through 1.0.3, update to a version that contains a fix for this issue. For FortiPAM versions 1.1.0 through 1.1.1, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the HTTPSd daemon to minimize the risk of exploitation.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2023-41678

Affected Products

Fortios

Fortipam

References · 11

• https://osv.dev/vulnerability/CVE-2023-41678 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41678 · Security Note
• https://fortiguard.com/psirt/FG-IR-23-196 · Vendor Advisory
• https://twitter.com/fletch_ai/status/1735179571949957411 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1734767697362092043 · Twitter Post
• https://twitter.com/CVEnew/status/1734828593685872771 · Twitter Post
• https://twitter.com/datalinkexperts/status/1734850736549142642 · Twitter Post
• https://twitter.com/collysucker/status/1735337777019900287 · Twitter Post
• https://t.me/cvenotify/63818 · Telegram Post
• https://twitter.com/RsSI47041968/status/1735008325597802762 · Twitter Post
• https://t.me/cvenotify/63446 · Telegram Post