---
id: 3957
title: "CVE-2023-27997 Is Exploitable, and 69% of FortiGate Firewalls Are Vulnerable"
cve: CVE-2023-27997
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/cve-2023-27997-exploitable-fortigate-vulnerable"
published_at: "2023-06-30T00:00:00Z"
tags: ["rce", "exploit", "shodan", "heap-overflow", "fortinet", "fortigate", "cve-2023-27997"]
phying_url: "https://phying.com/item/3957"
lang: en
---

# CVE-2023-27997 Is Exploitable, and 69% of FortiGate Firewalls Are Vulnerable

## Summary

Bishop Fox built a working exploit for CVE-2023-27997, a FortiOS SSL VPN heap overflow allowing RCE, and found nearly 490,000 exposed interfaces via Shodan—roughly 69% unpatched.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2023-27997
- **Published:** 2023-06-30T00:00:00Z
- **Original:** https://bishopfox.com/blog/cve-2023-27997-exploitable-fortigate-vulnerable
- **Phying News:** https://phying.com/item/3957