CVE-2024-23108

🗓️ 05 Feb 2024 13:26:15Reported by fortinetType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 179 Views

Improper neutralization of special elements used in OS command in Fortinet FortiSIEM allows unauthorized code execution via crafted API requests

Reporter	Title	Published	Views	Family All 22
GithubExploit	Exploit for OS Command Injection in Fortinet Fortisiem	28 May 202417:21	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Fortinet Fortisiem	20 May 202414:34	–	githubexploit
attackerkb	CVE-2024-23108	5 Feb 202414:15	–	attackerkb
BDU FSTEC	FortiSIEM Command Injection	7 Feb 202400:00	–	bdu_fstec
Circl	CVE-2024-23108	5 Feb 202415:26	–	circl
CNNVD	Fortinet FortiSIEM operating system command injection vulnerability	5 Feb 202400:00	–	cnnvd
CNVD	Fortinet FortiSIEM Operating System Command Injection Vulnerability	22 Feb 202400:00	–	cnvd
Cvelist	CVE-2024-23108	5 Feb 202413:26	–	cvelist
Tenable Nessus	Fortinet FortiSIEM Remote Unauthenticated OS Command Injection (FG-IR-23-130)	30 Nov 202300:00	–	nessus
Kitploit	CVE-2024-23108	29 Oct 202606:02	–	kitploit

NVD

Vulners

Node

fortinet fortisiemRange6.4.0–6.4.2

fortinet fortisiemRange6.5.0–6.5.2

fortinet fortisiemRange6.6.0–6.6.3

fortinet fortisiemRange6.7.0–6.7.8

fortinet fortisiemRange7.0.0–7.0.2

fortinet fortisiemMatch7.1.0

fortinet fortisiemMatch7.1.1

[
  {
    "vendor": "Fortinet",
    "product": "FortiSIEM",
    "cpes": [
      "cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.8:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.5.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.1.0",
        "lessThanOrEqual": "7.1.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.7.0",
        "lessThanOrEqual": "6.7.8",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.6.0",
        "lessThanOrEqual": "6.6.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.5.0",
        "lessThanOrEqual": "6.5.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.3",
        "status": "affected"
      }
    ]
  }
]