All vulnerabilities
CVE-2023-44247
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileg…
- Severity
- High7.2CVSS 3.1, High
- EPSS
- 1%
- Published
- 14 May 2024
- Updated
- 17 Jun 2026
Description
Title, description and vendor guidance are quoted from the source records.
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.
Weakness: CWE-415
Known exploited
Not listed in CISA KEV as of the last check.
Exploit prediction
1% probability of exploitation in the next 30 days (percentile 68%).
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
What the source states, per branch
Versions matched by Patcharo
Fortinet FortiOSSource: Fortinet (CVE record)
| Branch | Affected | Fixed in |
|---|---|---|
| 6.4 | 6.4.0 – 6.4.16 | Fixed after 6.4.16 |
Versions not listed are stated unaffected by the vendor.
Workaround / Vendor remediation
Vendor remediation · FortiOS
Upgrade to FortiOS version 7.0.0 or above
References
Provenance
Every fact on this page comes from the sources below. Nothing is written by an AI.
- Fortinet (CVE record)
- Fortinet (CVE record) · 27 Sept 2026, 23:46 UTC · Parser patcharo-cve5/1.1.0
- NVD
- NVD · 27 Sept 2026, 23:44 UTC · Parser patcharo-nvd/1.0.0
- FIRST EPSS
- FIRST EPSS · 27 Sept 2026, 23:46 UTC · Parser patcharo-epss/1.0.0
Last verified: 28 Sept 2026, 02:31 UTC