CVE-2022-42475

Name of the Vulnerable Software and Affected Versions FortiOS SSL-VPN versions 7.2.0 through 7.2.2 FortiOS SSL-VPN versions 7.0.0 through 7.0.8 FortiOS SSL-VPN versions 6.4.0 through 6.4.10 FortiOS SSL-VPN versions 6.2.0 through 6.2.11 FortiOS SSL-VPN versions 6.0.15 and earlier FortiProxy SSL-VPN versions 7.2.0 through 7.2.1 FortiProxy SSL-VPN versions 7.0.7 and earlier

Description A heap-based buffer overflow occurs in the SSL-VPN portal, which may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. A heap-based buffer overflow is a condition where a program writes more data to a heap memory buffer than it can hold, potentially corrupting adjacent memory. This issue was exploited as a zero-day in attacks targeting government organizations, MSP providers, and R&D networks in Europe and Africa. Attackers utilized sophisticated backdoors, such as BOLDMOVE and COATHANGER, to perform system analysis, execute remote shells, and disable logging to maintain stealth.

Recommendations Disable SSL-VPN as a temporary workaround for all affected versions of FortiOS SSL-VPN and FortiProxy SSL-VPN.