CVE-2022-42475—Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

漏洞名称

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

描述

Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://www.fortiguard.com/psirt/FG-IR-22-398
• https://nvd.nist.gov/vuln/detail/CVE-2022-42475

相关新闻文章

• Hackers now exploiting critical Fortinet FortiSIEM flaw in attacksJanuary 16, 2026
• Over 10K Fortinet firewalls exposed to actively exploited 2FA bypassJanuary 2, 2026
• Critical Fortinet flaws now exploited in Qilin ransomware attacksJune 6, 2025
• Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSL-VPN Symlink ExploitApril 11, 2025
• Hackers exploit old FortiGate vulnerabilities, use symlink trick to retain limited access to patched devicesApril 11, 2025

相关 CWE

• CWE-197