Format string error in FortiOS - CVE-2023-40721
Published: February 12, 2025
Vulnerability identifier: #VU103885
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-40721
CWE-ID: CWE-134
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a format string error in certain CLI commands. A local user can supply a specially crafted input that contains format string specifiers to the affected CLI command and execute arbitrary code on the target system.
Affected software
FortiOS
FortiPAM
FortiProxy
FortiSwitch Manager
FortiPAM
FortiProxy
FortiSwitch Manager
How to mitigate CVE-2023-40721
Install updates from vendor's website.
FortiOS - addressed in versions 7.2.7, 7.4.2
FortiPAM - update to 1.2.0
FortiProxy - addressed in versions 7.2.8, 7.4.1
FortiSwitch Manager - addressed in versions 7.0.3, 7.2.3
FortiPAM - update to 1.2.0
FortiProxy - addressed in versions 7.2.8, 7.4.1
FortiSwitch Manager - addressed in versions 7.0.3, 7.2.3