This vulnerability in Fortinet FortiOS arises from an out-of-bounds write condition present in versions 7.6.0 to 7.6.3, 7.4.0 to 7.4.8, and 7.2.0 to 7.2.11. Exploitation requires an attacker with low privileges and no user interaction, leveraging specially crafted packets to execute unauthorized code or commands on the affected system. The vulnerability impacts confidentiality, integrity, and availability, as indicated by the CVSS vector. Fortinet has released an official fix to remediate this issue.

Successful exploitation can lead to full compromise of the affected FortiOS device, allowing unauthorized code execution and potentially complete control over the system. This impacts the confidentiality, integrity, and availability of the device and its managed network traffic. There are no known exploits in the wild at this time.

An official patch is available from Fortinet to remediate this vulnerability. It is strongly recommended to apply the vendor-provided updates promptly to affected FortiOS versions. Since this is not a cloud service, remediation depends on customer action to update their devices.