ID:9150 - Exploit for Buffer Underwrite ('Buffer Underflow') in FortiOS and FortiProxy - CVE-2023-25610

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise the affected device.

The vulnerability exists due to a heap buffer underflow in the administrative interface. A remote non-authenticated attacker can send a specially crafted request to the administrative web interface of the affected device, trigger memory corruption and execute arbitrary code on the system.

Remediation