Lucene search
+L

CVE-2023-37936

🗓️ 14 Jan 2025 14:09:30Reported by fortinetType 
cvelist
 cvelist
🔗 www.cve.org👁 19 Views

Use of hard-coded key in Fortinet FortiSwitch allows unauthorized command execution via requests.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC
The microprogrammed software for FortiSwitch Ethernet switches, which utilizes a rigidly encoded cryptographic key, allows a intruder to execute any arbitrary code.
9 Apr 202500:00
bdu_fstec
Circl
CVE-2023-37936
14 Jan 202514:13
circl
CNNVD
Fortinet FortiSwitch 安全漏洞
14 Jan 202500:00
cnnvd
CVE
CVE-2023-37936
14 Jan 202514:09
cve
EUVD
EUVD-2023-41789
3 Oct 202520:07
euvd
NCSC
Vulnerabilities fixed in Fortinet FortiSwitch, FortiManager, FortiAnalyzer, FortiOS and FortiProxy
15 Jan 202513:25
ncsc
NVD
CVE-2023-37936
14 Jan 202514:15
nvd
OSV
CVE-2023-37936
14 Jan 202514:15
osv
RedhatCVE
CVE-2023-37936
23 May 202502:16
redhatcve
Vulnrichment
CVE-2023-37936
14 Jan 202514:09
vulnrichment
Rows per page
[
  {
    "vendor": "Fortinet",
    "product": "FortiSwitch",
    "cpes": [
      "cpe:2.3:a:fortinet:fortiswitch:7.4.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.2.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.0.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.0.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.0.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.0.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.0.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.0.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:7.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.13:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.12:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.11:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.10:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.9:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.8:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.4.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.2.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.2.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.2.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.0.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.0.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.0.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.0.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.0.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.0.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:fortinet:fortiswitch:6.0.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "7.4.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.2.0",
        "lessThanOrEqual": "7.2.5",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.13",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.7",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

14 Jan 2025 14:09Current
CVSS 3.19.8
EPSS0.00983
19