FortiOS / FortiProxy: Heap buffer underflow in administrative interface

A buffer underwrite ('buffer underflow') vulnerability in the FortiOS & FortiProxy administrative interface could allow a remote unauthenticated attacker to execute arbitrary code on the device and/or perform a DoS on the GUI, via specifically crafted requests.

Fortinet is not aware of any instance of this vulnerability being exploited. They constantly review and test the security of their products, and this vulnerability was discovered internally within that framework.