CVE-2016-6909
CriticalSummary
Buffer overflow in the Cookie parser in Fortinet FortiOS before version 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request.
Risk Assessment
This vulnerability poses a serious risk to organizations as it allows remote code execution, potentially leading to system compromise.
Recommendation
It is recommended to update FortiOS and FortiSwitch to the latest versions to mitigate this vulnerability and implement additional security measures such as monitoring network traffic.
Original NVD description (English source)
Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request, aka EGREGIOUSBLUNDER.