← back | CVE Intelligence

CVE-2022-42475

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2022-42475.

Coverage Span: 2023-05-17 → 2023-08-10
Reports: 2 related reports

Associated Reports & Timeline

Hàng ngàn thiết bị sử dụng FortiOS và FortiProxy chưa cập nhật bản vá cho các lỗ hổng bảo mật nghiêm trọng - Phần II

Part II details CVE-2022-42475, a heap buffer overflow in Fortinet's SSL-VPN (sslvpnd) from integer overflow in Content-Length handling, allowing unauthenticated RCE on FortiOS/FortiProxy.

A More Complete Exploit for Fortinet CVE-2022-42475

Bishop Fox's Team X details a more complete exploit for CVE-2022-42475—the FortiGate SSL VPN heap overflow exploited in the wild—covering ROP chains, shellcode, and per-appliance targeting.