FortiOS-6K7K vulnerabilities

2 known vulnerabilities in FortiOS-6K7K from Fortinet. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  FortiSwitchManager: Buffer Underwrite

  CVE-2023-25610Mar 24, 2025FortinetEPSS 18.3%

  A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2

• 9.8 Critical severity

  Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Exploited

  CVE-2023-27997Jun 13, 2023FortinetEPSS 86.8%

  A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, ver