Fortinet Critical Flaw: Let a Remote Attacker Execute Arbitrary Code

A ‘critical’ severity flaw has been detected inFortiOS and FortiProxy, identified as CVE-2023-33308 (CVSS rating 9.8). A remote attacker can use the vulnerability on susceptible devices to execute Fortinet arbitrary code. “A stack-based overflow vulnerability [CWE-124] in FortiOS&FortiProxy may allow a remote attacker to execute arbitrary code or command via crafted packets reaching proxy policies or firewall policies […]

The post Fortinet Critical Flaw: Let a Remote Attacker Execute Arbitrary Code appeared first on Cyber Security News.

amp code command critical critical flaw cve cve-2023-33308 cvss cwe cyber security devices flaw fortinet fortios fortiproxy may overflow rating severity stack vulnerability