Back to the CVE list
CVE-2022-42475 CISA KEV · Actively exploitedLinked to ransomware

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

CVSS score

—

EPSS probability

%99.5

Risk score

—

Published

3 y ago

OverviewPublic Exploits (7)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
scrt/cve-2022-42475
GitHub

POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon (★44)

Public PoCSource updated: 17.03.2023 01:55:20
G
CKevens/CVE-2022-42475-RCE-POC
GitHub

CVE-2022-42475 飞塔RCE漏洞 POC (★2)

Public PoCSource updated: 23.03.2023 17:43:03
G
Amir-hy/cve-2022-42475
GitHub

FortiOS buffer overflow vulnerability (★1)

Public PoCSource updated: 16.03.2023 10:12:46
G
uLl0a/cve-2022-42475-poc
GitHub

Proof of Concept (PoC) for research and controlled laboratory validation of CVE-2022-42475, a critical heap-based buffer overflow vulnerability affecting the SSL-VPN service in certain versions of FortiOS. (★1)

Public PoCSource updated: 25.08.2026 14:42:32
G
gilng3r/CVE-2022-42475-RCE
GitHub

Unauthenticated RCE in Fortinet ssl-vpn service (fortiOS and FortiProxy) (★0)

Public PoCSource updated: 25.12.2022 02:47:34
G
bryanster/ioc-cve-2022-42475
GitHub

test for the ioc described for FG-IR-22-398 (★0)

Public PoCSource updated: 18.01.2023 05:42:57
G
0xhaggis/CVE-2022-42475
GitHub

An exploit for CVE-2022-42475, a pre-authentication heap overflow in Fortinet networking products (★0)

Public PoCSource updated: 22.06.2023 06:23:28

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-42475"