{
  "id": "CVE-2023-27997",
  "vendor_project": "Fortinet",
  "product": "FortiOS SSL-VPN",
  "description": "Heap-based buffer overflow in FortiOS SSL-VPN web portal allowing unauthenticated remote code execution abused in state-sponsored pre-positioning.",
  "kev_date_added": "2023-06-13",
  "cvss": 9.8,
  "severity": "Critical",
  "advisories": [
    "AA24-038A"
  ],
  "cited_in_cases": [
    {
      "slug": "volt-typhoon-critical-infrastructure",
      "title": "Volt Typhoon Critical Infrastructure Pre-Positioning",
      "actor_slug": "volt-typhoon"
    }
  ],
  "indictment_cited": true
}