SB2023021731 - Multiple vulnerabilities in FortiWeb
Published: February 17, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 6 secuirty vulnerabilities.
1) Stack-based buffer overflow (CVE-ID: CVE-2022-30306)
The vulnerability allows a remote user to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in the CA sign functionality. A remote privileged user can pass an overly long password, trigger a stack-based buffer overflow and execute arbitrary code on the target system.
2) Stack-based buffer overflow (CVE-ID: CVE-2022-33871)
The vulnerability allows a remote user to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing specifically crafted CLI `execute backup-local rename` and `execute backup-local show` operations. A remote user can trigger a stack-based buffer overflow and execute arbitrary code on the target system.
3) Format string error (CVE-ID: CVE-2023-23783)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a format string error in the command line interpreter of FortiWeb. A local user can pass specially crafted command argument with format string specifiers to certain commands and execute arbitrary code on the system.
4) Heap-based buffer overflow (CVE-ID: CVE-2023-23782)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the command line interpreter of FortiWeb. A local user can pass specifically crafted arguments to existing commands to trigger a heap-based buffer overflow and execute arbitrary code on the system.
5) OS Command Injection (CVE-ID: CVE-2023-23779)
The vulnerability allows a remote user to execute arbitrary shell commands on the target system.
The vulnerability exists due to improper input validation. A remote user can pass specially crafted HTTP request to the application and execute arbitrary OS commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
6) Stack-based buffer overflow (CVE-ID: CVE-2023-23780)
The vulnerability allows a remote user to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing specifically crafted HTTP requests within the web interface. A remote user can trigger a stack-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Install update from vendor's website.