CVE-2022-42475 Scanner
CVE-2022-42475 Scanner - Fortinet SSL-VPN Heap-Based Buffer Overflow in Fortinet SSL-VPN
Used 3k times · 4.2k assets checked · url
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2022-42475
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
fortiproxyfortios
Updated Nov 7, 2026View on NVD →
S4E scanner
CVE history: fortiproxy
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →