← back | CVE Intelligence

CVE-2023-27997

Curated 3 security research writeups, vulnerability advisories and exploitation analyses for CVE-2023-27997.

Coverage Span: 2023-06-20 → 2023-10-27
Reports: 3 related reports

Associated Reports & Timeline

Building an Exploit for FortiGate Vulnerability CVE-2023-27997

Bishop Fox walks through building a proof-of-concept exploit for CVE-2023-27997, a pre-auth heap buffer overflow in Fortinet's SSL VPN, covering the flawed length check and jemalloc heap grooming.

CVE-2023-27997 Is Exploitable, and 69% of FortiGate Firewalls Are Vulnerable

Bishop Fox built a working exploit for CVE-2023-27997, a FortiOS SSL VPN heap overflow allowing RCE, and found nearly 490,000 exposed interfaces via Shodan—roughly 69% unpatched.

CVE-2023-27997 Vulnerability Scanner for FortiGate Firewalls

Bishop Fox released a non-crashing detection tool for CVE-2023-27997 that uses a timing side channel—comparing response times for valid versus invalid length fields—to check FortiGate firewalls.