Lucene search

[email protected]CVE-2022-43953

HistoryJun 13, 2023 - 9:15 a.m.

CVE-2022-43953

2023-06-1309:15:00

CWE-134

[email protected]

web.nvd.nist.gov

cve-2022-43953

fortinet

fortios

fortiproxy

security vulnerability

code execution

command injection

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7 allows attacker to execute unauthorized code or commands via specially crafted commands.

CPENameOperatorVersion
fortinet:fortiproxyfortinet fortiproxyeq7.2.0
fortinet:fortiproxyfortinet fortiproxyle7.0.7
fortinet:fortiproxyfortinet fortiproxyeq7.2.1
fortinet:fortiosfortinet fortiosle7.2.4
fortinet:fortiosfortinet fortiosle6.2.15
fortinet:fortiosfortinet fortiosle6.4.12
fortinet:fortiosfortinet fortiosle7.0.11

CPE	Name	Operator	Version
fortinet:fortiproxy	fortinet fortiproxy	eq	7.2.0
fortinet:fortiproxy	fortinet fortiproxy	le	7.0.7
fortinet:fortiproxy	fortinet fortiproxy	eq	7.2.1
fortinet:fortios	fortinet fortios	le	7.2.4
fortinet:fortios	fortinet fortios	le	6.2.15
fortinet:fortios	fortinet fortios	le	6.4.12
fortinet:fortios	fortinet fortios	le	7.0.11

References

fortiguard.com/psirt/FG-IR-22-463

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

Related for CVE-2022-43953

prion1 nessus1 fortinet1 cvelist1 ics1