Lucene search

[email protected]CVE-2022-33869

HistoryFeb 16, 2023 - 7:15 p.m.

CVE-2022-33869

2023-02-1619:15:12

CWE-78

[email protected]

web.nvd.nist.gov

cve-2022-33869

fortiwan

cwe-78

nvd

management interface

authenticated attacker

unauthorized commands

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.1%

JSON

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Affected configurations

NVD

Node

fortinetfortiwanRange4.0.0–4.0.6

fortinetfortiwanRange4.5.0–4.5.10

fortinetfortiwanMatch4.1.1

fortinetfortiwanMatch4.1.2

fortinetfortiwanMatch4.1.3

fortinetfortiwanMatch4.2.1

fortinetfortiwanMatch4.2.2

fortinetfortiwanMatch4.2.5

fortinetfortiwanMatch4.2.6

fortinetfortiwanMatch4.2.7

fortinetfortiwanMatch4.3.0

fortinetfortiwanMatch4.3.1

fortinetfortiwanMatch4.4.0

fortinetfortiwanMatch4.4.1

CPENameOperatorVersion
fortinet:fortiwanfortinet fortiwanle4.0.6
fortinet:fortiwanfortinet fortiwanlt4.5.10
fortinet:fortiwanfortinet fortiwaneq4.1.1
fortinet:fortiwanfortinet fortiwaneq4.1.2
fortinet:fortiwanfortinet fortiwaneq4.1.3
fortinet:fortiwanfortinet fortiwaneq4.2.1
fortinet:fortiwanfortinet fortiwaneq4.2.2
fortinet:fortiwanfortinet fortiwaneq4.2.5
fortinet:fortiwanfortinet fortiwaneq4.2.6
fortinet:fortiwanfortinet fortiwaneq4.2.7

CPE	Name	Operator	Version
fortinet:fortiwan	fortinet fortiwan	le	4.0.6
fortinet:fortiwan	fortinet fortiwan	lt	4.5.10
fortinet:fortiwan	fortinet fortiwan	eq	4.1.1
fortinet:fortiwan	fortinet fortiwan	eq	4.1.2
fortinet:fortiwan	fortinet fortiwan	eq	4.1.3
fortinet:fortiwan	fortinet fortiwan	eq	4.2.1
fortinet:fortiwan	fortinet fortiwan	eq	4.2.2
fortinet:fortiwan	fortinet fortiwan	eq	4.2.5
fortinet:fortiwan	fortinet fortiwan	eq	4.2.6
fortinet:fortiwan	fortinet fortiwan	eq	4.2.7

Rows per page:

1-10 of 141

CNA Affected

[
  {
    "vendor": "Fortinet",
    "product": "FortiWAN",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "4.5.0",
        "lessThanOrEqual": "4.5.9",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "4.4.0",
        "lessThanOrEqual": "4.4.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "4.3.0",
        "lessThanOrEqual": "4.3.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "4.2.5",
        "lessThanOrEqual": "4.2.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "4.2.1",
        "lessThanOrEqual": "4.2.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "4.1.1",
        "lessThanOrEqual": "4.1.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "4.0.0",
        "lessThanOrEqual": "4.0.6",
        "status": "affected"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-22-157

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.1%

JSON

Related for CVE-2022-33869

fortinet1 cvelist1 prion1 nvd1