CVE-2023-41842
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
9.0%
A use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiManager version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.3 and before 7.0.10, Fortinet FortiAnalyzer version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.3 and before 7.0.10, Fortinet FortiAnalyzer-BigData before 7.2.5 and Fortinet FortiPortal version 6.0 all versions and version 5.3 all versions allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fortinet | fortianalyzer | * | cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* |
| fortinet | fortianalyzer_bigdata | * | cpe:2.3:a:fortinet:fortianalyzer_bigdata:*:*:*:*:*:*:*:* |
| fortinet | fortianalyzer_bigdata | 6.2.5 | cpe:2.3:a:fortinet:fortianalyzer_bigdata:6.2.5:*:*:*:*:*:*:* |
| fortinet | fortimanager | * | cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* |
| fortinet | fortiportal | * | cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:* |
References
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
9.0%