CVE-2023-27997 — Security Box Score

CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2023-27997CRITICAL

Fortinet FortiOS and FortiProxy SSL-VPN

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .8569   99.7   YES

AFFECTED
  Product       Versions  Fixed
  FortiOS-6K7K  7.0.10 –  —
  FortiProxy    7.2.0 –   —
  FortiOS       7.2.0 –   —

TIMELINE
  Mar 9   Reserved by fortinet
  Jun 13  Added to CISA KEV, remediation due 2023-07-04
  Jun 13  Published (CNA: fortinet)
  Jul 31  RESCORED — CVE-2023-27997 (Fortinet FortiOS-6K7K). CVSS 9.2 → 9.8 (NVD).

CWE-787, CWE-122 · CNA: fortinet · CVSS v3.1 · 2 references · NVD status: Analyzed · KEV due July 4, 2023

Description

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.

Lifecycle

Complete event history — 4 events, chronological
Date	Event	Detail
March 9, 2023	Reserved	Reserved by fortinet
June 13, 2023	KEV ADDED	Added to CISA KEV, remediation due 2023-07-04
June 13, 2023	Published	Published (CNA: fortinet)
July 31, 2026	RESCORED	RESCORED — CVE-2023-27997 (Fortinet FortiOS-6K7K). CVSS 9.2 → 9.8 (NVD).

Affected

Affected products and packages — 3 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Fortinet	FortiOS-6K7K	—	7.0.10	—
Fortinet	FortiProxy	—	7.2.0	—
Fortinet	FortiOS	—	7.2.0	—

Weaknesses

CWE-787 · CWE-122

References (2)

https://fortiguard.com/psirt/FG-IR-23-097 [Vendor Advisory]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27997 [US Government Resource]

Authoritative record: CVE-2023-27997 at cve.org

Vendors: fortinet

Weaknesses: CWE-787 · CWE-122

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2023-27997 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.