The vulnerability of the FortiADC application delivery controller and the FortiDDoS/FortiDDoS-F software and hardware protection devices relates to the failure to take measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

FortiADC and FortiDDoS devices allow remote command execution due to unneutralized OS command elements.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-40679	11 Apr 202320:23	–	circl
CNNVD	Fortinet FortiADC、FortiDDoS和FortiDDoS-F 操作系统命令注入漏洞	11 Apr 202300:00	–	cnnvd
CVE	CVE-2022-40679	11 Apr 202316:05	–	cve
Cvelist	CVE-2022-40679	11 Apr 202316:05	–	cvelist
EUVD	EUVD-2022-43950	3 Oct 202520:07	–	euvd
Fortinet	FortiADC & FortiDDoS & FortiDDoS-F - Command injection in log & report module	11 Apr 202300:00	–	fortinet
NVD	CVE-2022-40679	11 Apr 202317:15	–	nvd
OSV	CVE-2022-40679	11 Apr 202317:15	–	osv
Prion	Command injection	11 Apr 202317:15	–	prion
Positive Technologies	PT-2022-6547 · Fortinet · Fortiadc +2	14 Sep 202200:00	–	ptsecurity