CVE-2023-29181

Description

A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiOS 5.6 all versions, FortiOS 5.4 all versions, FortiOS 5.2 all versions, FortiOS 5.0 all versions, FortiOS 4.3 all versions, FortiOS 4.2 all versions, FortiOS 4.1 all versions, FortiOS 4.0 all versions, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.4, FortiProxy 7.0.0 through 7.0.10, FortiProxy 2.0.0 through 2.0.12, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specially crafted command.

CVSS breakdown

Affected products

• fortinet / fortios6.2.0 – 6.2.0
• fortinet / fortios7.2.0 – 7.2.4
• fortinet / fortios7.0.0 – 7.0.11
• fortinet / fortios6.4.0 – 6.4.12
• fortinet / fortios6.2.0 – 6.2.14
• fortinet / fortios6.0.0 – 6.0.16
• fortinet / fortios5.6.0 – 5.6.14
• fortinet / fortios5.4.0 – 5.4.13
• fortinet / fortios5.2.0 – 5.2.15
• fortinet / fortios5.0.0 – 5.0.14
• fortinet / fortios4.3.0 – 4.3.19
• fortinet / fortios4.2.0 – 4.2.16
• fortinet / fortios4.1.1 – 4.1.11
• fortinet / fortios4.0.0 – 4.0.4
• fortinet / fortios5.2.1 – 5.2.1
• fortinet / fortios5.2.0 – 5.2.0
• fortinet / fortios5.0.14 – 5.0.14
• fortinet / fortios5.0.13 – 5.0.13
• fortinet / fortios5.0.12 – 5.0.12
• fortinet / fortios5.0.11 – 5.0.11
• fortinet / fortios5.0.10 – 5.0.10
• fortinet / fortios5.0.9 – 5.0.9
• fortinet / fortios5.0.8 – 5.0.8
• fortinet / fortios5.0.7 – 5.0.7
• fortinet / fortios5.0.6 – 5.0.6
• fortinet / fortios5.0.5 – 5.0.5
• fortinet / fortios5.0.4 – 5.0.4
• fortinet / fortios5.0.3 – 5.0.3
• fortinet / fortios5.0.2 – 5.0.2
• fortinet / fortios5.0.1 – 5.0.1
• fortinet / fortios5.0.0 – 5.0.0
• fortinet / fortios4.3.19 – 4.3.19
• fortinet / fortios4.3.18 – 4.3.18
• fortinet / fortios4.3.17 – 4.3.17
• fortinet / fortios4.3.16 – 4.3.16
• fortinet / fortios4.3.15 – 4.3.15
• fortinet / fortios4.3.14 – 4.3.14
• fortinet / fortios4.3.13 – 4.3.13
• fortinet / fortios4.3.12 – 4.3.12
• fortinet / fortios4.3.11 – 4.3.11
• fortinet / fortios4.3.10 – 4.3.10
• fortinet / fortios4.3.9 – 4.3.9
• fortinet / fortios4.3.8 – 4.3.8
• fortinet / fortios4.3.7 – 4.3.7
• fortinet / fortios4.3.6 – 4.3.6
• fortinet / fortios4.3.5 – 4.3.5
• fortinet / fortios4.3.4 – 4.3.4
• fortinet / fortios4.3.3 – 4.3.3
• fortinet / fortios4.3.2 – 4.3.2
• fortinet / fortios4.3.1 – 4.3.1
• fortinet / fortios4.3.0 – 4.3.0
• fortinet / fortios4.2.16 – 4.2.16
• fortinet / fortios4.2.15 – 4.2.15
• fortinet / fortios4.2.14 – 4.2.14
• fortinet / fortios4.2.13 – 4.2.13
• fortinet / fortios4.2.12 – 4.2.12
• fortinet / fortios4.2.11 – 4.2.11
• fortinet / fortios4.2.10 – 4.2.10
• fortinet / fortios4.2.9 – 4.2.9
• fortinet / fortios4.2.8 – 4.2.8
• fortinet / fortios4.2.7 – 4.2.7
• fortinet / fortios4.2.6 – 4.2.6
• fortinet / fortios4.2.5 – 4.2.5
• fortinet / fortios4.2.4 – 4.2.4
• fortinet / fortios4.2.3 – 4.2.3
• fortinet / fortios4.2.2 – 4.2.2
• fortinet / fortios4.2.1 – 4.2.1
• fortinet / fortios4.2.0 – 4.2.0
• fortinet / fortios4.1.11 – 4.1.11
• fortinet / fortios4.1.10 – 4.1.10
• fortinet / fortios4.1.9 – 4.1.9
• fortinet / fortios4.1.8 – 4.1.8
• fortinet / fortios4.1.7 – 4.1.7
• fortinet / fortios4.1.6 – 4.1.6
• fortinet / fortios4.1.5 – 4.1.5
• fortinet / fortios4.1.4 – 4.1.4
• fortinet / fortios4.1.3 – 4.1.3
• fortinet / fortios4.1.2 – 4.1.2
• fortinet / fortios4.1.1 – 4.1.1
• fortinet / fortios4.0.4 – 4.0.4
• fortinet / fortios4.0.3 – 4.0.3
• fortinet / fortios4.0.2 – 4.0.2
• fortinet / fortios4.0.1 – 4.0.1
• fortinet / fortios4.0.0 – 4.0.0
• fortinet / fortios6.0.0 – 6.2.15
• fortinet / fortios7.2.4 – 7.2.4
• fortinet / fortios7.2.3 – 7.2.3
• fortinet / fortios7.2.2 – 7.2.2
• fortinet / fortios7.2.1 – 7.2.1
• fortinet / fortios7.2.0 – 7.2.0
• fortinet / fortios7.0.11 – 7.0.11
• fortinet / fortios7.0.10 – 7.0.10
• fortinet / fortios7.0.9 – 7.0.9
• fortinet / fortios7.0.8 – 7.0.8
• fortinet / fortios7.0.7 – 7.0.7
• fortinet / fortios7.0.6 – 7.0.6
• fortinet / fortios7.0.5 – 7.0.5
• fortinet / fortios7.0.4 – 7.0.4
• fortinet / fortios7.0.3 – 7.0.3
• fortinet / fortios7.0.2 – 7.0.2
• fortinet / fortios7.0.1 – 7.0.1
• fortinet / fortios7.0.0 – 7.0.0
• fortinet / fortios6.4.12 – 6.4.12
• fortinet / fortios6.4.11 – 6.4.11
• fortinet / fortios6.4.10 – 6.4.10
• fortinet / fortios6.4.9 – 6.4.9
• fortinet / fortios6.4.8 – 6.4.8
• fortinet / fortios6.4.7 – 6.4.7
• fortinet / fortios6.4.6 – 6.4.6
• fortinet / fortios6.4.5 – 6.4.5
• fortinet / fortios6.4.4 – 6.4.4
• fortinet / fortios6.4.3 – 6.4.3
• fortinet / fortios6.4.2 – 6.4.2
• fortinet / fortios6.4.1 – 6.4.1
• fortinet / fortios6.4.0 – 6.4.0
• fortinet / fortios6.2.14 – 6.2.14
• fortinet / fortios6.2.13 – 6.2.13
• fortinet / fortios6.2.12 – 6.2.12
• fortinet / fortios6.2.11 – 6.2.11
• fortinet / fortios6.2.10 – 6.2.10
• fortinet / fortios6.2.9 – 6.2.9
• fortinet / fortios6.2.8 – 6.2.8
• fortinet / fortios6.2.7 – 6.2.7
• fortinet / fortios6.2.6 – 6.2.6
• fortinet / fortios6.2.5 – 6.2.5
• fortinet / fortios6.2.4 – 6.2.4
• fortinet / fortios6.2.3 – 6.2.3
• fortinet / fortios6.2.2 – 6.2.2
• fortinet / fortios6.2.1 – 6.2.1
• fortinet / fortios6.0.16 – 6.0.16
• fortinet / fortios6.0.15 – 6.0.15
• fortinet / fortios6.0.14 – 6.0.14
• fortinet / fortios6.0.13 – 6.0.13
• fortinet / fortios6.0.12 – 6.0.12
• fortinet / fortios6.0.11 – 6.0.11
• fortinet / fortios6.0.10 – 6.0.10
• fortinet / fortios6.0.9 – 6.0.9
• fortinet / fortios6.0.8 – 6.0.8
• fortinet / fortios6.0.7 – 6.0.7
• fortinet / fortios6.0.6 – 6.0.6
• fortinet / fortios6.0.5 – 6.0.5
• fortinet / fortios6.0.4 – 6.0.4
• fortinet / fortios6.0.3 – 6.0.3
• fortinet / fortios6.0.2 – 6.0.2
• fortinet / fortios6.0.1 – 6.0.1
• fortinet / fortios6.0.0 – 6.0.0
• fortinet / fortios5.6.14 – 5.6.14
• fortinet / fortios5.6.13 – 5.6.13
• fortinet / fortios5.6.12 – 5.6.12
• fortinet / fortios5.6.11 – 5.6.11
• fortinet / fortios5.6.10 – 5.6.10
• fortinet / fortios5.6.9 – 5.6.9
• fortinet / fortios5.6.8 – 5.6.8
• fortinet / fortios5.6.7 – 5.6.7
• fortinet / fortios5.6.6 – 5.6.6
• fortinet / fortios5.6.5 – 5.6.5
• fortinet / fortios5.6.4 – 5.6.4
• fortinet / fortios5.6.3 – 5.6.3
• fortinet / fortios5.6.2 – 5.6.2
• fortinet / fortios5.6.1 – 5.6.1
• fortinet / fortios5.6.0 – 5.6.0
• fortinet / fortios5.4.13 – 5.4.13
• fortinet / fortios5.4.12 – 5.4.12
• fortinet / fortios5.4.11 – 5.4.11
• fortinet / fortios5.4.10 – 5.4.10
• fortinet / fortios5.4.9 – 5.4.9
• fortinet / fortios5.4.8 – 5.4.8
• fortinet / fortios5.4.7 – 5.4.7
• fortinet / fortios5.4.6 – 5.4.6
• fortinet / fortios5.4.5 – 5.4.5
• fortinet / fortios5.4.4 – 5.4.4
• fortinet / fortios5.4.3 – 5.4.3
• fortinet / fortios5.4.2 – 5.4.2
• fortinet / fortios5.4.1 – 5.4.1
• fortinet / fortios5.4.0 – 5.4.0
• fortinet / fortios5.2.15 – 5.2.15
• fortinet / fortios5.2.14 – 5.2.14
• fortinet / fortios5.2.13 – 5.2.13
• fortinet / fortios5.2.12 – 5.2.12
• fortinet / fortios5.2.11 – 5.2.11
• fortinet / fortios5.2.10 – 5.2.10
• fortinet / fortios5.2.9 – 5.2.9
• fortinet / fortios5.2.8 – 5.2.8
• fortinet / fortios5.2.7 – 5.2.7
• fortinet / fortios5.2.6 – 5.2.6
• fortinet / fortios5.2.5 – 5.2.5
• fortinet / fortios5.2.4 – 5.2.4
• fortinet / fortios5.2.3 – 5.2.3
• fortinet / fortios5.2.2 – 5.2.2
• fortinet / fortipam1.0.3 – 1.0.3
• fortinet / fortipam1.0.2 – 1.0.2
• fortinet / fortipam1.0.1 – 1.0.1
• fortinet / fortipam1.0.0 – 1.0.0
• fortinet / fortipam1.0.0 – 1.0.3
• fortinet / fortipam1.0.0 – 1.1.0
• fortinet / fortiproxy7.0.1 – 7.0.1
• fortinet / fortiproxy7.0.0 – 7.0.0
• fortinet / fortiproxy2.0.12 – 2.0.12
• fortinet / fortiproxy2.0.11 – 2.0.11
• fortinet / fortiproxy2.0.10 – 2.0.10
• fortinet / fortiproxy2.0.9 – 2.0.9
• fortinet / fortiproxy2.0.8 – 2.0.8
• fortinet / fortiproxy2.0.7 – 2.0.7
• fortinet / fortiproxy2.0.6 – 2.0.6
• fortinet / fortiproxy2.0.5 – 2.0.5
• fortinet / fortiproxy2.0.4 – 2.0.4
• fortinet / fortiproxy2.0.3 – 2.0.3
• fortinet / fortiproxy2.0.2 – 2.0.2
• fortinet / fortiproxy2.0.1 – 2.0.1
• fortinet / fortiproxy2.0.0 – 2.0.0
• fortinet / fortiproxy1.2.13 – 1.2.13
• fortinet / fortiproxy1.2.12 – 1.2.12
• fortinet / fortiproxy1.2.11 – 1.2.11
• fortinet / fortiproxy1.2.10 – 1.2.10
• fortinet / fortiproxy1.2.9 – 1.2.9
• fortinet / fortiproxy1.2.8 – 1.2.8
• fortinet / fortiproxy1.2.7 – 1.2.7
• fortinet / fortiproxy1.2.6 – 1.2.6
• fortinet / fortiproxy1.2.5 – 1.2.5
• fortinet / fortiproxy1.2.4 – 1.2.4
• fortinet / fortiproxy1.2.3 – 1.2.3
• fortinet / fortiproxy1.2.2 – 1.2.2
• fortinet / fortiproxy1.2.1 – 1.2.1
• fortinet / fortiproxy01.02.00 – 01.02.00
• fortinet / fortiproxy1.1.6 – 1.1.6
• fortinet / fortiproxy1.1.5 – 1.1.5
• fortinet / fortiproxy1.1.4 – 1.1.4
• fortinet / fortiproxy01.01.03 – 01.01.03
• fortinet / fortiproxy01.01.02 – 01.01.02
• fortinet / fortiproxy01.01.01 – 01.01.01
• fortinet / fortiproxy01.01.00 – 01.01.00
• fortinet / fortiproxy01.00.07 – 01.00.07
• fortinet / fortiproxy01.00.06 – 01.00.06
• fortinet / fortiproxy01.00.05 – 01.00.05
• fortinet / fortiproxy01.00.04 – 01.00.04
• fortinet / fortiproxy01.00.03 – 01.00.03
• fortinet / fortiproxy01.00.02 – 01.00.02
• fortinet / fortiproxy01.00.01 – 01.00.01
• fortinet / fortiproxy01.00.00 – 01.00.00
• fortinet / fortiproxy1.0.0 – 2.0.13
• fortinet / fortiproxy7.2.4 – 7.2.4
• fortinet / fortiproxy7.2.3 – 7.2.3
• fortinet / fortiproxy7.2.2 – 7.2.2
• fortinet / fortiproxy7.2.1 – 7.2.1
• fortinet / fortiproxy7.2.0 – 7.2.0
• fortinet / fortiproxy7.0.10 – 7.0.10
• fortinet / fortiproxy7.0.9 – 7.0.9
• fortinet / fortiproxy7.0.8 – 7.0.8
• fortinet / fortiproxy7.0.7 – 7.0.7
• fortinet / fortiproxy7.0.6 – 7.0.6
• fortinet / fortiproxy7.0.5 – 7.0.5
• fortinet / fortiproxy7.0.4 – 7.0.4
• fortinet / fortiproxy7.0.3 – 7.0.3
• fortinet / fortiproxy7.2.0 – 7.2.4
• fortinet / fortiproxy7.0.2 – 7.0.2
• fortinet / fortiproxy7.0.0 – 7.0.10
• fortinet / fortiproxy2.0.0 – 2.0.12
• fortinet / fortiproxy1.2.0 – 1.2.13
• fortinet / fortiproxy1.1.0 – 1.1.6
• fortinet / fortiproxy1.0.0 – 1.0.7

References

• VENDOR_ADVISORYhttps://fortiguard.com/psirt/FG-IR-23-119