FortiADC - OS command injection vulnerability in CLI

2023-02-1600:00:00

FortiGuard Labs

www.fortiguard.com

fortiadc

os command injection

cwe-78

authenticated attacker

cli commands

0.0004 Low

EPSS

Percentile

9.8%

JSON

An improper neutralization of special elements used in an OS command (‘OS Command Injection’) vulnerability [CWE-78] in FortiADC may allow an authenticated attacker to execute arbitrary shell code as root via CLI commands.

CPENameOperatorVersion
fortiadceq7.0.1
fortiadceq7.0.0
fortiadceq6.2.3
fortiadceq6.2.2
fortiadceq6.2.1
fortiadceq6.2.0
fortiadceq6.1.6
fortiadceq6.1.5
fortiadceq6.1.4
fortiadceq6.1.3

Name	Operator	Version
fortiadc	eq	7.0.1
fortiadc	eq	7.0.0
fortiadc	eq	6.2.3
fortiadc	eq	6.2.2
fortiadc	eq	6.2.1
fortiadc	eq	6.2.0
fortiadc	eq	6.1.6
fortiadc	eq	6.1.5
fortiadc	eq	6.1.4
fortiadc	eq	6.1.3

Rows per page:

1-10 of 541

0.0004 Low

EPSS

Percentile

9.8%

JSON

Related for FG-IR-22-046