VULNERABILITY INTELLIGENCE

CVE-2022-30306

CVSS score6.6 MEDIUM
EPSS probability0.97%
CISA KEVNot currently listed
Published2023-02-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below may allow an authenticated attacker to achieve arbitrary code execution via specifically crafted password.

Weakness classification

  • CWE-121: Stack-based Buffer Overflow
  • CWE-787: Out-of-bounds Write

Primary references