Lucene search

PRIOn knowledge basePRION:CVE-2023-26210

HistoryJun 13, 2023 - 9:15 a.m.

Command injection

2023-06-1309:15:00

PRIOn knowledge base

www.prio-n.com

command injection

fortinet

vulnerability

cwe-78

fortiadcmanager

fortiadc

local attacker

shell code

root user

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

Multiple improper neutralization of special elements used in an os command (‘OS Command Injection’) vulnerabilties [CWE-78] in Fortinet FortiADCManager version 7.1.0 and before 7.0.0, FortiADC version 7.2.0 and before 7.1.2 allows a local authenticated attacker to execute arbitrary shell code as root user via crafted CLI requests.

CPENameOperatorVersion
fortiadcge6.0.0
fortiadcle6.0.4
fortiadcge6.1.0
fortiadcle6.1.6
fortiadcge5.4.0
fortiadcle5.4.5
fortiadcge5.3.0
fortiadcle5.3.7
fortiadceq7.1.0
fortiadcge5.2.0

Name	Operator	Version
fortiadc	ge	6.0.0
fortiadc	le	6.0.4
fortiadc	ge	6.1.0
fortiadc	le	6.1.6
fortiadc	ge	5.4.0
fortiadc	le	5.4.5
fortiadc	ge	5.3.0
fortiadc	le	5.3.7
fortiadc	eq	7.1.0
fortiadc	ge	5.2.0

Rows per page:

1-10 of 281

References

fortiguard.com/psirt/FG-IR-23-076