Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2023-27997 Vulnerability Scanner for FortiGate Firewalls

bishopfox.com | vulnerability | CVE-2023-27997 | #security-tools | #detection | #fortinet | #fortigate | #vulnerability-scanner | #cve-2023-27997

Summary

Bishop Fox released a non-crashing detection tool for CVE-2023-27997 that uses a timing side channel—comparing response times for valid versus invalid length fields—to check FortiGate firewalls.
Published
Collected

original ↗

Related coverage

  1. CVE-2023-27997 Is Exploitable, and 69% of FortiGate Firewalls Are Vulnerable (bishopfox.com)
  2. Building an Exploit for FortiGate Vulnerability CVE-2023-27997 (bishopfox.com)
  3. CVE-2024-21762 Vulnerability Scanner for FortiGate Firewalls (bishopfox.com)
  4. A More Complete Exploit for Fortinet CVE-2022-42475 (bishopfox.com)
  5. Breaking Fortinet Firmware Encryption (bishopfox.com)
  6. No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452 (bishopfox.com)

back