writeups.xyz / XORtigate: Pre-authentication Remote Code Execution on Fortigate VPN (CVE-2023-27997)

Submitter : c2a

Date: 13 June 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Heap Overflow
• Memory Corruption

Programs :

• Fortinet (Fortigate VPN)

Authors :

• Charles Fol (@Cfreal_)

Link :
https://blog.lexfo.fr/xortigate-cve-2023-27997.html