# CVE-2022-42475

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

- Page: https://www.vulneraibility.com/cve/CVE-2022-42475
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2022-12-13; CISA due date 2023-01-03; known ransomware use
- EPSS: 99.47% (percentile 99.9)
- Unvetted proof-of-concept code on GitHub: 9 GitHub proofs of concept (first 2023-01-17)
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2024-10-23)
- Weakness: CWE-197
- Published: 2023-01-02

## Affected versions

- Fortinet FortiOS: affected >= 7.2.0 and <= 7.2.2; >= 7.0.0 and <= 7.0.8; >= 6.4.0 and <= 6.4.10; >= 6.2.0 and <= 6.2.11; >= 6.0.0 and <= 6.0.15; >= 5.6.0 and <= 5.6.14; >= 5.4.0 and <= 5.4.13; >= 5.2.0 and <= 5.2.15; >= 5.0.0 and <= 5.0.14
- Fortinet FortiProxy: affected >= 7.2.0 and <= 7.2.1; >= 7.0.0 and <= 7.0.7; >= 2.0.0 and <= 2.0.11; >= 1.2.0 and <= 1.2.13; >= 1.1.0 and <= 1.1.6; >= 1.0.0 and <= 1.0.7

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://fortiguard.com/psirt/FG-IR-22-398
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.