This document is marked TLP:CLEAR. Disclosure is not limited. Sources may use TLP:CLEAR when information

cisa.gov · Undated · Licence: not cleared; local research copy only

CVEs this report names

1 CVE

CVE-2022-42475Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
Fortinet · FortiOSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1574Hijack Execution Flow+2 more · 4 reports
99.5%Top 0.06%
88.8priority

CVE-2022-42475 in a network perimeter FortiGate 300D firewall that was not patched.

instance, where Volt Typhoon likely exploited CVE-2022-42475 in an unpatched Fortinet device, Volt

None

No passage in this report has been tied to an ATT&CK technique.