The vulnerability of the graphical and application software interface of the FortiTester hardware-based diagnostic and audit software exists due to the failure to take measures to neutralize the special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

FortiTester interface exposes command injection via unneutralized elements, enabling remote commands.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2022-35845	3 Jan 202320:17	–	circl
CNNVD	FortiTester 操作系统命令注入漏洞	3 Jan 202300:00	–	cnnvd
CVE	CVE-2022-35845	3 Jan 202316:57	–	cve
Cvelist	CVE-2022-35845	3 Jan 202316:57	–	cvelist
EUVD	EUVD-2022-38718	3 Oct 202520:07	–	euvd
Fortinet	FortiTester - Multiple command injection vulnerabilities in GUI and API	3 Jan 202300:00	–	fortinet
NCSC	Vulnerabilities fixed in Fortinet products	4 Jan 202300:00	–	ncsc
NVD	CVE-2022-35845	3 Jan 202317:15	–	nvd
OSV	CVE-2022-35845	3 Jan 202317:15	–	osv
Prion	Command injection	3 Jan 202317:15	–	prion