CVE-2023-29181
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
A use of externally-controlled format string vulnerability in Fortinet FortiOS, FortiPAM, and FortiProxy allows an attacker to execute unauthorized code or commands via a specially crafted command.
Risk Assessment
This could lead to remote code execution and device compromise.
Recommendation
Update affected Fortinet products to the latest patched versions.
Other vulnerabilities in Fortinet FortiOS/FortiPAM/FortiProxy
See all- CVE-2025-54821Low
An improper privilege management vulnerability (CWE-269) exists in Fortinet FortiOS, FortiPAM, and FortiProxy. An authenticated administrator may bypass the trusted host policy via a crafted CLI command.
- CVE-2023-36640Medium
Fortinet FortiOS, FortiPAM, and FortiProxy in the listed versions contain a use of externally-controlled format string vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted commands. The vulnerability affects multiple versions of FortiOS (7.4.0, 7.2.0-7.2.5, 7.0, 6.4, 6.2, 6.0.0-6.0.16), FortiPAM (1.1.0, 1.0), and FortiProxy (7.2.0-7.2.5, 7.0.0-7.0.11, 2.0, 1.2, 1.1, and others).
Original NVD description (English source)
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiOS 5.6 all versions, FortiOS 5.4 all versions, FortiOS 5.2 all versions, FortiOS 5.0 all versions, FortiOS 4.3 all versions, FortiOS 4.2 all versions, FortiOS 4.1 all versions, FortiOS 4.0 all versions, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.4, FortiProxy 7.0.0 through 7.0.10, FortiProxy 2.0.0 through 2.0.12, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specially crafted command.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS