Fortinet · FortiOS
CVE-2022-42475
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
What it is
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
CISA: Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: January 3, 2023
- Added to the CISA list
- December 13, 2022
- Published
- January 2, 2023
- Severity
- Critical 9.3 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 99.5% in the top 0.1% of all known vulnerabilities
- Weakness
- CWE-197
- More details
- NVD · CVE.org · CISA
All references (1)
More exploited flaws from Fortinet
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jul 27, 2026 | Exposure of Sensitive Information to an Unauthorized Actor | FortiOS | Medium 5.3 | 29% |
| Jun 25, 2025 | Use of Hard-Coded Credentials | FortiOS | Medium 6.5 | 6.6% |
| Feb 9, 2024 | Out-of-Bound Write | FortiOS | Critical 9.6 | 85% |
| Mar 14, 2023 | Path Traversal | FortiOS | Medium 6.5 | 11% |
| Dec 10, 2021 | Arbitrary File Download | FortiOS | Low 3.3 | 0.9% |
| Nov 3, 2021 | Default Configuration | FortiOS | Medium 6.5 | 19% |
| Nov 3, 2021 | SSL VPN Path Traversal | FortiOS | Critical 9.1 | >99.9% |
| Nov 3, 2021 | SSL VPN Improper Authentication | FortiOS | High 7.5 | 45% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.