CVE-2023-46714

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.2.1 through 7.2.6 FortiOS versions 7.4.0 through 7.4.1

Description The issue is related to a stack-based buffer overflow that may allow a privileged attacker to execute arbitrary code or commands via crafted HTTP or HTTPS requests. This can be done by sending specially formed requests to the administrative interface.

Recommendations For FortiOS versions 7.2.1 through 7.2.6, update to a version outside of this range to resolve the issue. For FortiOS versions 7.4.0 through 7.4.1, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the administrative interface to minimize the risk of exploitation.