What’s Vulnerable › Vulnerabilities

CVE-2022-27491

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-06 · updated 2026-06-17

Description

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML data to an arbitrary victim via crafted TCP requests, potentially flooding the victim.

Affected products

• Fortinet FortiOS (FortiGate): from 6.0.0 through 6.0.14; from 6.2.0 before 6.2.11; from 6.4.0 before 6.4.9; from 7.0.0 before 7.0.6; 7.2.0 — fixed in 6.2.11, 6.4.9, 7.0.6

How to fix

Upgrade to a fixed version: Fortinet FortiOS (FortiGate) 6.2.11, 6.4.9, 7.0.6. Check the vendor advisory for mitigations.

References

• https://fortiguard.com/psirt/FG-IR-22-073
• https://fortiguard.com/psirt/FG-IR-22-073

Get alerted when CVE-2022-27491 or the next vulnerability affects your stack