CVE-2024-23108

🗓️ 05 Feb 2024 13:26:15Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 123 Views

Improper neutralization of special elements used in OS command in Fortinet FortiSIEM allows unauthorized code execution via crafted API requests

Reporter	Title	Published	Views	Family All 18
GithubExploit	Exploit for OS Command Injection in Fortinet Fortisiem	28 May 202417:21	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Fortinet Fortisiem	20 May 202414:34	–	githubexploit
ATTACKERKB	CVE-2024-23108	5 Feb 202414:15	–	attackerkb
Circl	CVE-2024-23108	5 Feb 202415:26	–	circl
CNNVD	Fortinet FortiSIEM 操作系统命令注入漏洞	5 Feb 202400:00	–	cnnvd
CNVD	Fortinet FortiSIEM Operating System Command Injection Vulnerability	22 Feb 202400:00	–	cnvd
Cvelist	CVE-2024-23108	5 Feb 202413:26	–	cvelist
Tenable Nessus	Fortinet FortiSIEM Remote Unauthenticated OS Command Injection (FG-IR-23-130)	30 Nov 202300:00	–	nessus
NVD	CVE-2024-23108	5 Feb 202414:15	–	nvd
OSV	CVE-2024-23108	5 Feb 202414:15	–	osv

NVD

Node

fortinet fortisiemRange6.4.0–6.4.2

fortinet fortisiemRange6.5.0–6.5.2

fortinet fortisiemRange6.6.0–6.6.3

fortinet fortisiemRange6.7.0–6.7.8

fortinet fortisiemRange7.0.0–7.0.2

fortinet fortisiemMatch7.1.0

fortinet fortisiemMatch7.1.1

[
  {
    "vendor": "Fortinet",
    "product": "FortiSIEM",
    "cpes": [
      "cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.8:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.5.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.1.0",
        "lessThanOrEqual": "7.1.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.7.0",
        "lessThanOrEqual": "6.7.8",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.6.0",
        "lessThanOrEqual": "6.6.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.5.0",
        "lessThanOrEqual": "6.5.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.3",
        "status": "affected"
      }
    ]
  }
]