Fortinet FortiWeb Out-of-Bounds Write Vulnerability Allowing Arbitrary Code Execution

A vulnerability allowing out-of-bounds write has been identified in Fortinet FortiWeb versions 8.0.0 to 8.0.3, 7.6.0 to 7.6.6, and 7.4.0 to 7.4.11. This vulnerability may enable a remote privileged attacker to execute unauthorized code or commands by sending crafted HTTP requests to the FortiWeb CGI daemon.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can upgrade to Fortinet FortiWeb 8.0.4 or above, FortiWeb 7.6.7 or above, or FortiWeb 7.4.12 or above, depending on their current version.