CVE-2023-42789

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-12 · updated 2026-07-08
Weakness: CWE-787

Description

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0.0 through 7.0.12, FortiProxy 2.0.0 through 2.0.13, FortiSASE 23.2.b allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

Summary

CVE-2023-42789 is a critical out-of-bounds write (CVSS 9.8) in Fortinet FortiOS, FortiProxy, and FortiSASE that lets an attacker execute unauthorized code or commands via specially crafted HTTP requests. Affected versions include FortiOS 7.4.0-7.4.1, 7.2.0-7.2.5, 7.0.0-7.0.12, 6.4.0-6.4.14, and 6.2.0-6.2.15, plus FortiProxy 7.4.0, 7.2.0-7.2.6, 7.0.0-7.0.12, and 2.0.0-2.0.13, and FortiSASE 23.2.b. It is not in CISA KEV and no exploitation is reported, though EPSS gives a 3.3% 30-day probability. Apply the Fortinet firmware updates for your branch and restrict management/HTTP exposure where possible.

CVE-2023-42789 ثغرة كتابة خارج الحدود (out-of-bounds write) حرجة بدرجة CVSS 9.8 في Fortinet FortiOS وFortiProxy وFortiSASE، وتسمح للمهاجم بتنفيذ تعليمات برمجية أو أوامر غير مصرّح بها عبر طلبات HTTP مصممة خصيصًا. تشمل الإصدارات المتأثرة FortiOS 7.4.0-7.4.1 و7.2.0-7.2.5 و7.0.0-7.0.12 و6.4.0-6.4.14 و6.2.0-6.2.15، وFortiProxy 7.4.0 و7.2.0-7.2.6 و7.0.0-7.0.12 و2.0.0-2.0.13، وFortiSASE 23.2.b. الثغرة ليست في قائمة CISA KEV ولا يوجد استغلال مُبلّغ عنه، مع احتمال استغلال 3.3% خلال 30 يومًا وفق EPSS. طبّق تحديثات Fortinet المناسبة لفرعك وقلّل تعرّض واجهات الإدارة وHTTP قدر الإمكان.

Affected products

Fortinet FortiOS (FortiGate): from 6.2.0 through 6.2.15; from 6.4.0 through 6.4.14; from 7.0.0 through 7.0.12; from 7.2.0 through 7.2.5; 7.4.0, 7.4.1
Fortinet FortiProxy: from 2.0.0 through 2.0.13; from 7.0.0 through 7.0.12; from 7.2.0 through 7.2.6; 7.4.0

References

Get alerted when CVE-2023-42789 or the next vulnerability affects your stack