{"cve_id":"CVE-2022-42475","published":"2023-01-02T09:15:09.490000+00:00","last_modified":"2026-06-17T05:04:59.630000+00:00","vuln_status":"Analyzed","description":"A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier  and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","base_score":9.8,"base_severity":"CRITICAL","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-197","CWE-787"],"in_kev":true,"kev_date_added":"2022-12-13","kev_ransomware":true,"epss_score":0.99474,"epss_percentile":0.99943,"cap_rule_version":"0.1.1","stage":"INITIAL_ACCESS","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T10:16:54.123664+00:00","first_seen":"2023-01-02T09:15:09.490000+00:00","kev_first_seen":"2022-12-13T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["fortinet"],"products":["fim-7901e","fim-7904e","fim-7910e","fim-7920e","fim-7921f","fim-7941f","fortigate-6300f","fortigate-6300f-dc","fortigate-6500f","fortigate-6500f-dc","fortigate-6501f","fortigate-6501f-dc","fortigate-6601f","fortigate-6601f-dc","fortigate-7030e","fortigate-7040e","fortigate-7060e","fortigate-7121f","fortios","fortiproxy","fpm-7620e","fpm-7620f","fpm-7630e"],"affected":[{"vendor":"fortinet","product":"fortios","ranges":["≥ 5.0.0 and ≤ 5.0.14","≥ 5.2.0 and ≤ 5.2.15","≥ 5.4.0 and ≤ 5.4.13","≥ 5.6.0 and ≤ 5.6.14","≥ 6.0.0 and < 6.0.16","≥ 6.2.0 and < 6.2.12","≥ 6.4.0 and < 6.4.11","≥ 7.0.0 and < 7.0.9","≥ 7.2.0 and < 7.2.3","≥ 6.0.0 and < 6.0.15","≥ 6.4.0 and < 6.4.10","≥ 7.0.0 and < 7.0.8"]},{"vendor":"fortinet","product":"fortiproxy","ranges":["≥ 7.2.0 and < 7.2.2","≥ 7.0.0 and < 7.0.8","≥ 2.0.0 and < 2.0.12","≥ 1.2.0 and ≤ 1.2.13","≥ 1.1.0 and ≤ 1.1.6","≥ 1.0.0 and ≤ 1.0.7"]}]}