FortiADC - Command injection in diagnose system df CLI command

2023-06-1200:00:00

FortiGuard Labs

www.fortiguard.com

fortiadc

command injection

vulnerability

0.0004 Low

EPSS

Percentile

9.8%

JSON

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC CLI may allow a local and authenticated attacker to execute unauthorized commands via specifically crafted arguments in diagnose system df CLI command.

CPENameOperatorVersion
fortiadceq7.1.0
fortiadceq7.0.3
fortiadceq7.0.2
fortiadceq7.0.1
fortiadceq7.0.0
fortiadceq6.2.4
fortiadceq6.2.3
fortiadceq6.2.2
fortiadceq6.2.1
fortiadceq6.2.0

Name	Operator	Version
fortiadc	eq	7.1.0
fortiadc	eq	7.0.3
fortiadc	eq	7.0.2
fortiadc	eq	7.0.1
fortiadc	eq	7.0.0
fortiadc	eq	6.2.4
fortiadc	eq	6.2.3
fortiadc	eq	6.2.2
fortiadc	eq	6.2.1
fortiadc	eq	6.2.0

Rows per page:

1-10 of 221

0.0004 Low

EPSS

Percentile

9.8%

JSON

Related for FG-IR-23-107