FortiWeb - format string vulnerability in the CLI

2023-02-1600:00:00

FortiGuard Labs

www.fortiguard.com

fortiweb

format string

vulnerability

cli

cwe-134

command line interpreter

authenticated user

unauthorized code

commands

software

0.0004 Low

EPSS

Percentile

5.2%

JSON

A format string vulnerability [CWE-134] in the command line interpreter of FortiWeb may allow an authenticated user to execute unauthorized code or commands via specially crafted command arguments.

CPENameOperatorVersion
fortiwebeq7.0.1
fortiwebeq7.0.0
fortiwebeq6.4.3
fortiwebeq6.4.2
fortiwebeq6.4.1
fortiwebeq6.4.0

Name	Operator	Version
fortiweb	eq	7.0.1
fortiweb	eq	7.0.0
fortiweb	eq	6.4.3
fortiweb	eq	6.4.2
fortiweb	eq	6.4.1
fortiweb	eq	6.4.0

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for FG-IR-22-187