CVE-2022-27491

7.5 highEPSS 1.5%

High (7.5) in fortinet fortios. EPSS 1.5% chance of exploitation in the next 30 days.

A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of "blocked page" HTML data to an arbitrary victim via crafted TCP requests, potentially flooding the victim.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
Published: 2022-09-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortios

References

https://fortiguard.com/psirt/FG-IR-22-073
https://fortiguard.com/psirt/FG-IR-22-073

Check your stack JSON