CVE-2023-22640 - Vulnerability Details

Description

A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.

Published: 2023-05-03

Score: 7.1 High

EPSS: < 1% Very Low

KEV: No

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Fortinet

FortiOS

unaffected

Version	Status	Constraints
`7.2.0`	affected	≤ 7.2.3
`7.0.0`	affected	≤ 7.0.10
`6.4.0`	affected	≤ 6.4.11
`6.2.0`	affected	≤ 6.2.13
`6.0.0`	affected	≤ 6.0.16

Fortinet

FortiProxy

unaffected

Version	Status	Constraints
`7.2.0`	affected	≤ 7.2.1
`7.0.0`	affected	≤ 7.0.7
`2.0.0`	affected	≤ 2.0.14
`1.2.1`	affected	≤ 1.2.13
`01.02.00`	affected	—
`1.1.4`	affected	≤ 1.1.6
`01.01.00`	affected	≤ 01.01.03
`01.00.00`	affected	≤ 01.00.07

Configuration 1 [-]

OR	cpe:2.3:a:fortinet:fortiproxy:1.0.0:::::::*
	cpe:2.3:a:fortinet:fortiproxy:1.1.0:::::::*
	cpe:2.3:a:fortinet:fortiproxy:1.2.0:::::::*
	cpe:2.3:a:fortinet:fortiproxy:2.0.0:::::::*
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::

No data.

No data available yet.

Remediation

Vendor Solution

Upgrade to FortiProxy version 7.2.2 or above Upgrade to FortiProxy version 7.0.8 or above Upgrade to FortiOS version 7.4.0 or above Upgrade to FortiOS version 7.2.5 or above Upgrade to FortiOS version 7.2.4 or above Upgrade to FortiOS version 7.0.11 or above Upgrade to FortiOS version 6.4.12 or above Upgrade to FortiOS version 6.2.14 or above Upgrade to FortiOS version 6.0.17 or above

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2023-26774	A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.11, FortiOS version 6.2.0 through 6.2.13, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7, FortiProxy all versions 2.0, FortiProxy all versions 1.2, FortiProxy all versions 1.1, FortiProxy all versions 1.0 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0089.

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://fortiguard.com/psirt/FG-IR-22-475

History

Thu, 22 Oct 2026 14:00:00 +0000

Type	Values Removed	Values Added
Description	A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.11, FortiOS version 6.2.0 through 6.2.13, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7, FortiProxy all versions 2.0, FortiProxy all versions 1.2, FortiProxy all versions 1.1, FortiProxy all versions 1.0 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.	A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.
CPEs		cpe:2.3:a:fortinet:fortiproxy:01.00.00:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.01:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.02:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.03:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.04:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.05:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.06:::::::* cpe:2.3:a:fortinet:fortiproxy:01.00.07:::::::* cpe:2.3:a:fortinet:fortiproxy:01.01.00:::::::* cpe:2.3:a:fortinet:fortiproxy:01.01.01:::::::* cpe:2.3:a:fortinet:fortiproxy:01.01.02:::::::* cpe:2.3:a:fortinet:fortiproxy:01.01.03:::::::* cpe:2.3:a:fortinet:fortiproxy:01.02.00:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.4:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.5:::::::* cpe:2.3:a:fortinet:fortiproxy:1.1.6:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.10:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.11:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.12:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.13:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.1:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.2:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.3:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.4:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.5:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.6:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.7:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.8:::::::* cpe:2.3:a:fortinet:fortiproxy:1.2.9:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.10:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.11:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.12:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.13:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.14:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.1:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.2:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.3:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.4:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.5:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.6:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.7:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.8:::::::* cpe:2.3:a:fortinet:fortiproxy:2.0.9:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.0:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.1:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.2:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.3:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.4:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.5:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.6:::::::* cpe:2.3:a:fortinet:fortiproxy:7.0.7:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.0:::::::* cpe:2.3:a:fortinet:fortiproxy:7.2.1:::::::* cpe:2.3:o:fortinet:fortios:6.0.0:::::::* cpe:2.3:o:fortinet:fortios:6.0.10:::::::* cpe:2.3:o:fortinet:fortios:6.0.11:::::::* cpe:2.3:o:fortinet:fortios:6.0.12:::::::* cpe:2.3:o:fortinet:fortios:6.0.13:::::::* cpe:2.3:o:fortinet:fortios:6.0.14:::::::* cpe:2.3:o:fortinet:fortios:6.0.15:::::::* cpe:2.3:o:fortinet:fortios:6.0.16:::::::* cpe:2.3:o:fortinet:fortios:6.0.1:::::::* cpe:2.3:o:fortinet:fortios:6.0.2:::::::* cpe:2.3:o:fortinet:fortios:6.0.3:::::::* cpe:2.3:o:fortinet:fortios:6.0.4:::::::* cpe:2.3:o:fortinet:fortios:6.0.5:::::::* cpe:2.3:o:fortinet:fortios:6.0.6:::::::* cpe:2.3:o:fortinet:fortios:6.0.7:::::::* cpe:2.3:o:fortinet:fortios:6.0.8:::::::* cpe:2.3:o:fortinet:fortios:6.0.9:::::::* cpe:2.3:o:fortinet:fortios:6.2.0:::::::* cpe:2.3:o:fortinet:fortios:6.2.10:::::::* cpe:2.3:o:fortinet:fortios:6.2.11:::::::* cpe:2.3:o:fortinet:fortios:6.2.12:::::::* cpe:2.3:o:fortinet:fortios:6.2.13:::::::* cpe:2.3:o:fortinet:fortios:6.2.1:::::::* cpe:2.3:o:fortinet:fortios:6.2.2:::::::* cpe:2.3:o:fortinet:fortios:6.2.3:::::::* cpe:2.3:o:fortinet:fortios:6.2.4:::::::* cpe:2.3:o:fortinet:fortios:6.2.5:::::::* cpe:2.3:o:fortinet:fortios:6.2.6:::::::* cpe:2.3:o:fortinet:fortios:6.2.7:::::::* cpe:2.3:o:fortinet:fortios:6.2.8:::::::* cpe:2.3:o:fortinet:fortios:6.2.9:::::::* cpe:2.3:o:fortinet:fortios:6.4.0:::::::* cpe:2.3:o:fortinet:fortios:6.4.10:::::::* cpe:2.3:o:fortinet:fortios:6.4.11:::::::* cpe:2.3:o:fortinet:fortios:6.4.1:::::::* cpe:2.3:o:fortinet:fortios:6.4.2:::::::* cpe:2.3:o:fortinet:fortios:6.4.3:::::::* cpe:2.3:o:fortinet:fortios:6.4.4:::::::* cpe:2.3:o:fortinet:fortios:6.4.5:::::::* cpe:2.3:o:fortinet:fortios:6.4.6:::::::* cpe:2.3:o:fortinet:fortios:6.4.7:::::::* cpe:2.3:o:fortinet:fortios:6.4.8:::::::* cpe:2.3:o:fortinet:fortios:6.4.9:::::::* cpe:2.3:o:fortinet:fortios:7.0.0:::::::* cpe:2.3:o:fortinet:fortios:7.0.10:::::::* cpe:2.3:o:fortinet:fortios:7.0.1:::::::* cpe:2.3:o:fortinet:fortios:7.0.2:::::::* cpe:2.3:o:fortinet:fortios:7.0.3:::::::* cpe:2.3:o:fortinet:fortios:7.0.4:::::::* cpe:2.3:o:fortinet:fortios:7.0.5:::::::* cpe:2.3:o:fortinet:fortios:7.0.6:::::::* cpe:2.3:o:fortinet:fortios:7.0.7:::::::* cpe:2.3:o:fortinet:fortios:7.0.8:::::::* cpe:2.3:o:fortinet:fortios:7.0.9:::::::* cpe:2.3:o:fortinet:fortios:7.2.0:::::::* cpe:2.3:o:fortinet:fortios:7.2.1:::::::* cpe:2.3:o:fortinet:fortios:7.2.2:::::::* cpe:2.3:o:fortinet:fortios:7.2.3:::::::*

Wed, 23 Oct 2024 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Subscriptions

Fortinet Fortios Fortiproxy

MITRE

Status: PUBLISHED

Assigner: fortinet

Published: 2023-05-03T21:26:29.469Z

Updated: 2026-10-22T13:48:27.389Z

Reserved: 2023-01-05T10:06:31.522Z

Link: CVE-2023-22640

Vulnrichment

Updated: 2024-08-02T10:13:49.407Z

NVD

Status : Modified

Published: 2023-05-03T22:15:17.857

Modified: 2026-10-22T14:17:29.890

Link: CVE-2023-22640

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-787

Tracking

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object