This vulnerability is a stack-based buffer overflow in multiple FortiOS versions, enabling remote attackers to execute unauthorized code or commands via specially crafted packets. Affected versions include 6.4.0, all 7.0.x, all 7.2.x, 7.4.0 through 7.4.8, and 7.6.0 through 7.6.3. The CVSS 3.1 vector indicates network attack vector, high complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The remediation level is currently classified as workaround, with no official patch released yet. No active exploitation has been reported.

Successful exploitation could allow remote attackers to execute arbitrary code or commands on affected FortiOS devices, potentially compromising confidentiality, integrity, and availability of the system. The medium severity rating reflects the combination of attack complexity and potential impact.

Currently, no official patch is available. A workaround is recommended by the vendor, though specific details are not provided in the input data. Organizations should monitor Fortinet advisories for official fixes and apply workarounds as directed. Since no exploits are known in the wild, immediate urgent remediation is not indicated, but caution and preparation are advised.