CVE-2023-37930

Summary

CVE-2023-37930 is a vulnerability affecting multiple Fortinet FortiOS SSL VPN webmode versions and FortiProxy SSL VPN webmode. The issue involves uninitialized resources (CWE-908) and excessive iteration (CWE-834), which can result in memory corruption. An attacker can exploit this vulnerability by sending specifically crafted requests, potentially allowing them to execute code or commands. Affected versions include FortiOS SSL VPN webmode 7.4.0, 7.2.0 through 7.2.5, 7.0.1 through 7.0.11, and 6.4.7 through 6.4.14, as well as FortiProxy SSL VPN webmode 7.2.0 through 7.2.6 and 7.0.0 through 7.0.12. It is recommended that affected organizations apply the appropriate patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.