CVE-2024-23108

🗓️ 05 Feb 2024 13:26:15Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 131 Views

Improper neutralization of special elements used in OS command in Fortinet FortiSIEM allows unauthorized code execution via crafted API requests

Reporter	Title	Published	Views	Family All 19
GithubExploit	Exploit for OS Command Injection in Fortinet Fortisiem	28 May 202417:21	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Fortinet Fortisiem	20 May 202414:34	–	githubexploit
ATTACKERKB	CVE-2024-23108	5 Feb 202414:15	–	attackerkb
BDU FSTEC	The vulnerability of the FortiSIEM security management system arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.	7 Feb 202400:00	–	bdu_fstec
Circl	CVE-2024-23108	5 Feb 202415:26	–	circl
CNNVD	Fortinet FortiSIEM 操作系统命令注入漏洞	5 Feb 202400:00	–	cnnvd
CNVD	Fortinet FortiSIEM Operating System Command Injection Vulnerability	22 Feb 202400:00	–	cnvd
Cvelist	CVE-2024-23108	5 Feb 202413:26	–	cvelist
Tenable Nessus	Fortinet FortiSIEM Remote Unauthenticated OS Command Injection (FG-IR-23-130)	30 Nov 202300:00	–	nessus
NVD	CVE-2024-23108	5 Feb 202414:15	–	nvd

NVD

Node

fortinet fortisiemRange6.4.0–6.4.2

fortinet fortisiemRange6.5.0–6.5.2

fortinet fortisiemRange6.6.0–6.6.3

fortinet fortisiemRange6.7.0–6.7.8

fortinet fortisiemRange7.0.0–7.0.2

fortinet fortisiemMatch7.1.0

fortinet fortisiemMatch7.1.1

[
  {
    "vendor": "Fortinet",
    "product": "FortiSIEM",
    "cpes": [
      "cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.8:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.5.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.1.0",
        "lessThanOrEqual": "7.1.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.7.0",
        "lessThanOrEqual": "6.7.8",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.6.0",
        "lessThanOrEqual": "6.6.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.5.0",
        "lessThanOrEqual": "6.5.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.3",
        "status": "affected"
      }
    ]
  }
]