Vulnerability · Published Nov 14, 2023 · Assigned by fortinet
CVE-2023-36641
Medium 6.2
In plain English
A medium-severity security flaw in FortiOS from Fortinet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities).
Official description
A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy 7.2.0 through 7.2.4, FortiProxy 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to denial of service via specifically crafted HTTP requests.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiOS | 7.4.07.2.0 – through 7.2.57.0.0 – through 7.0.126.4.0 – through 6.4.166.2.0 – through 6.2.176.0.0 – through 6.0.18 |
| Fortinet | FortiProxy | 7.2.0 – through 7.2.47.0.0 – through 7.0.102.0.0 – through 2.0.141.2.1 – through 1.2.1301.02.001.1.4 – through 1.1.601.01.00 – through 01.01.0301.00.00 – through 01.00.07 |
Weakness: CWE-197 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C