---
id: CVE-2023-22640
title: >-
  A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3,
  FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0
  through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.1,
  FortiPro…
summary: >-
  A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3,
  FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0
  through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.1,
  FortiPro…
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C'
cvssSource: cna
cwe:
  - CWE-787
vendor: Fortinet
product: FortiOS
affected:
  - FortiOS >= 7.2.0 <= 7.2.3
  - FortiOS >= 7.0.0 <= 7.0.10
  - FortiOS >= 6.4.0 <= 6.4.11
  - FortiOS >= 6.2.0 <= 6.2.13
  - FortiOS >= 6.0.0 <= 6.0.16
  - FortiProxy >= 7.2.0 <= 7.2.1
  - FortiProxy >= 7.0.0 <= 7.0.7
  - FortiProxy >= 2.0.0 <= 2.0.14
  - FortiProxy >= 1.2.1 <= 1.2.13
  - FortiProxy 01.02.00
  - FortiProxy >= 1.1.4 <= 1.1.6
  - FortiProxy >= 01.01.00 <= 01.01.03
  - FortiProxy >= 01.00.00 <= 01.00.07
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2024-10-23T14:11:09.946619Z'
published: '2023-05-03'
updated: '2026-10-22'
sourceUpdated: '2026-10-22T13:48:27.389Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-22640'
references:
  - url: 'https://fortiguard.com/psirt/FG-IR-22-475'
    label: 'https://fortiguard.com/psirt/FG-IR-22-475'
tags:
  - cve.org
epss: 0.0089
epssPercentile: 0.59186
ingestedAt: '2026-10-22T22:00:50.272Z'
---

## Overview

A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.

## Affected

- `FortiOS >= 7.2.0 <= 7.2.3`
- `FortiOS >= 7.0.0 <= 7.0.10`
- `FortiOS >= 6.4.0 <= 6.4.11`
- `FortiOS >= 6.2.0 <= 6.2.13`
- `FortiOS >= 6.0.0 <= 6.0.16`
- `FortiProxy >= 7.2.0 <= 7.2.1`
- `FortiProxy >= 7.0.0 <= 7.0.7`
- `FortiProxy >= 2.0.0 <= 2.0.14`
- `FortiProxy >= 1.2.1 <= 1.2.13`
- `FortiProxy 01.02.00`
- `FortiProxy >= 1.1.4 <= 1.1.6`
- `FortiProxy >= 01.01.00 <= 01.01.03`
- `FortiProxy >= 01.00.00 <= 01.00.07`

## Remediation

Upgrade to FortiProxy version 7.2.2 or above
Upgrade to FortiProxy version 7.0.8 or above
Upgrade to FortiOS version 7.4.0 or above
Upgrade to FortiOS version 7.2.5 or above
Upgrade to FortiOS version 7.2.4 or above
Upgrade to FortiOS version 7.0.11 or above
Upgrade to FortiOS version 6.4.12 or above
Upgrade to FortiOS version 6.2.14 or above
Upgrade to FortiOS version 6.0.17 or above