---
id: 3964
title: "A More Complete Exploit for Fortinet CVE-2022-42475"
cve: CVE-2022-42475
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/exploit-cve-2022-42475"
published_at: "2023-05-17T00:00:00Z"
tags: ["rop", "exploit-development", "heap-overflow", "fortinet", "fortigate", "cve-2022-42475"]
phying_url: "https://phying.com/item/3964"
lang: en
---

# A More Complete Exploit for Fortinet CVE-2022-42475

## Summary

Bishop Fox's Team X details a more complete exploit for CVE-2022-42475—the FortiGate SSL VPN heap overflow exploited in the wild—covering ROP chains, shellcode, and per-appliance targeting.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2022-42475
- **Published:** 2023-05-17T00:00:00Z
- **Original:** https://bishopfox.com/blog/exploit-cve-2022-42475
- **Phying News:** https://phying.com/item/3964