CVE-2023-40721
MEDIUMDescription
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or commands via specially crafted requests.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| fortinet | fortios |
| fortinet | fortios |
| fortinet | fortios |
| fortinet | fortiswitchmanager |
| fortinet | fortiswitchmanager |
| fortinet | fortiproxy |
| fortinet | fortiproxy |
| fortinet | fortiproxy |
| fortinet | fortipam |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2023-40721? +
How severe is CVE-2023-40721? +
What products are affected by CVE-2023-40721? +
How do I check if I'm vulnerable to CVE-2023-40721? +
Related Vulnerabilities
ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending …
Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing …
WM Downloader version 3.1.2.2 is vulnerable to a buffer overflow when processing a specially crafted .m3u playlist file. The application …
In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan …
An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions `stamgr_cfg_adpt_addStaFavourite` and `stamgr_cfg_adpt_addStaIot` pass …
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service …