FortiOS/FortiProxy [CVE-2023-27997]

Vulnerability [CVE-2023-27997] may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.

Remediation & Mitigation

• Use Vulnerability Detection to search for CVE-2023-27997.

  Navigation Options

  SPM App: Vulnerability Detection

  CM App: Vulnerability Detection

  Insurance App: Vulnerability Detection

• See potential exposure: The results of the product fingerprinting scan identifying companies using Fortinet VPN is available to customers, which may indicate that FortiOS, FortiProxy, and possibly other Fortinet products are in use. The scan is specific to Fortinet VPN and does not include version information. Use this as evidence of potential exposure (not confirmed) based on the possible use of the affected product. Contact your Bitsight Customer Success Manager or Bitsight Support to learn more.