The vulnerability of the software for centralized device management in Fortinet’s FortiManager system lies in errors during the elimination of specific elements in the template creation mechanism. This allows a malicious actor to execute arbitrary code.

🗓️ 24 Apr 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

FortiManager template creation vulnerability allows arbitrary code execution via crafted templates.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-47542	11 Apr 202410:53	–	circl
CNNVD	Fortinet FortiManager 安全漏洞	9 Apr 202400:00	–	cnnvd
CNVD	Fortinet FortiManager Arbitrary Command Execution Vulnerability	15 Apr 202400:00	–	cnvd
CVE	CVE-2023-47542	9 Apr 202414:24	–	cve
Cvelist	CVE-2023-47542	9 Apr 202414:24	–	cvelist
EUVD	EUVD-2023-51653	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Fortinet	10 Apr 202400:00	–	ncsc
NVD	CVE-2023-47542	9 Apr 202415:15	–	nvd
OSV	CVE-2023-47542	9 Apr 202415:15	–	osv
Positive Technologies	PT-2024-3043 · Fortinet · Fortimanager	9 Apr 202400:00	–	ptsecurity

Vulners

Node

fortinet fortimanagerRange7.4.0–7.4.2

OR

fortinet fortimanagerRange7.2.0–7.2.5

OR

fortinet fortimanagerRange7.0.0–7.0.11

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-23-419
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024040957
web	www.web.nvd.nist.gov/view/vuln/detail
fortiguard	www.fortiguard.com/psirt/FG-IR-23-419

24 Apr 2024 00:00Current

6Medium risk

Vulners AI Score6

CVSS 36.7

CVSS 26.8

EPSS0.0027

FortiManager vulnerability template creation arbitrary code execution crafted templates centralized management