FortiADC & FortiDDoS & FortiDDoS-F - Command injection in log & report module

2023-04-1100:00:00

FortiGuard Labs

www.fortiguard.com

command injection

fortiadc

fortiddos-f

os command vulnerability

cwe-78

authenticated attacker

unauthorized commands

software

0.0004 Low

EPSS

Percentile

9.8%

JSON

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC, FortiDDoS and FortiDDoS-F may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

CPENameOperatorVersion
fortiddoseq5.6.2
fortiddoseq5.6.1
fortiddoseq5.6.0
fortiddoseq5.5.2
fortiddoseq5.5.1
fortiddoseq5.5.0
fortiddoseq5.4.3
fortiddoseq5.4.2
fortiddoseq5.4.1
fortiddoseq5.4.0

Name	Operator	Version
fortiddos	eq	5.6.2
fortiddos	eq	5.6.1
fortiddos	eq	5.6.0
fortiddos	eq	5.5.2
fortiddos	eq	5.5.1
fortiddos	eq	5.5.0
fortiddos	eq	5.4.3
fortiddos	eq	5.4.2
fortiddos	eq	5.4.1
fortiddos	eq	5.4.0

Rows per page:

1-10 of 1121

0.0004 Low

EPSS

Percentile

9.8%

JSON

Related for FG-IR-22-335