Assigner | fortinet |
Reserved | 2023-09-27 |
Published | 2024-05-14 |
Updated | 2024-06-04 |
Description
A double free vulnerability [CWE-415] in Fortinet FortiOS before 7.0.0 may allow a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C |
Problem types
Execute unauthorized code or commands
Product status
6.4.0
6.2.0
References
https://fortiguard.com/psirt/FG-IR-23-195