Stack Buffer Overflow in Log Report

An attacker with admin credentials could execute arbitrary code on FortiOS, FortiPAM, or FortiProxy devices, potentially gaining full control of the security appliance and access to protected network resources or credentials stored within it.

Organizations using Fortinet security appliances (FortiOS on FortiGate firewalls, FortiPAM for privileged account management, or FortiProxy for web proxy/filtering) are affected. This is most critical for utilities and critical infrastructure where these devices protect SCADA networks, operator workstations, or administrative access to control systems.

An authenticated administrator accesses the log report feature through the management interface. By supplying specially crafted input or triggering report generation with malicious parameters, the attacker overflows a stack buffer, potentially executing arbitrary code with the privileges of the FortiOS/FortiPAM/FortiProxy process.