FortiOS - Out-of-bound Write in sslvpnd

A out-of-bounds write vulnerability [CWE-787] in FortiOS may allow a remote unauthenticated attacker to execute arbitrary code or command via specially crafted HTTP requests.
Workaround : disable SSL VPN (disable webmode is NOT a valid workaround)
Note: This is potentially being exploited in the wild.

arbitrary code attacker code command cwe exploited fortios http http requests may out-of-bounds out-of-bounds write requests ssl ssl vpn unauthenticated valid vpn vulnerability workaround