A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via specially crafted packets.
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiOS | 7.6.0, 7.4.0, 7.2.0, 7.0.0, 6.4.0, 6.2.0, 6.0.0 |
Updated description with details about the capwap daemon, added new affected versions, and marked the vulnerability as actively exploited with a patch available.
Initial creation