Fortinet urges to patch the critical RCE flaw CVE-2023-27997 in Fortigate firewalls

Fortinet addressed a new critical flaw, tracked as CVE-2023-27997, in FortiOS and FortiProxy that is likely exploited in a limited number of attacks. Fortinet has finally published an official advisory about the critical vulnerability, tracked as CVE-2023-27997 (CVSS score: 9.2), impacting FortiOS and FortiProxy. “A heap-based buffer overflow vulnerability [CWE-122] in FortiOS and FortiProxy SSL-VPN may allow a remote […]

The post Fortinet urges to patch the critical RCE flaw CVE-2023-27997 in Fortigate firewalls appeared first on Security Affairs.

advisory attacks breaking news buffer buffer overflow critical critical flaw critical vulnerability cve cve-2023-27997 cvss exploited firewalls flaw fortigate fortinet fortios fortiproxy hacking information security news it information security official overflow patch pierluigi paganini rce score security vulnerability