CVE-2018-13383VulnerabilityPublished 01/10/2022Updated 10/24/2026
CVE-2018-13383: Fortinet FortiOS and FortiProxy Out-of-bounds Write
Affects Fortinet FortiOS and FortiProxySource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 01/10/2022
- KEV deadline
- 07/10/2022
- Ransomware
- Used in ransomware campaigns
- EPSS
- 33.6% chance of exploitation in 30 days – higher than 98% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2018-13383 is a heap buffer overflow vulnerability in Fortinet FortiOS and FortiProxy that can cause the SSL VPN web service to terminate for logged-in users. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.