A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions…
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Apple, Fortinet
- Product
- ios, fortios, fortiproxy
- CVSS
- 2.3
- Exposure class
- Edge / VPN / firewall, Mobile OS
Why it ranks 18 (Routine)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Apple)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.