Format string

2023-02-1619:15:00

PRIOn knowledge base

www.prio-n.com

fortinet

fortiweb

command execution

security vulnerability

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments.

CPENameOperatorVersion
fortiwebge6.4.0
fortiweblt6.4.2
fortiwebge7.0.0
fortiweblt7.0.2

Name	Operator	Version
fortiweb	ge	6.4.0
fortiweb	lt	6.4.2
fortiweb	ge	7.0.0
fortiweb	lt	7.0.2

References

fortiguard.com/psirt/FG-IR-22-187