Lucene search

PRIOn knowledge basePRION:CVE-2023-41838

HistoryOct 10, 2023 - 5:15 p.m.

Command injection

2023-10-1017:15:00

PRIOn knowledge base

www.prio-n.com

improper neutralization

special elements

os command injection

fortimanager 7.4.0

fortimanager 7.2.0

fortimanager 7.2.3

unauthorized code execution

fortimanager cli

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.6%

JSON

An improper neutralization of special elements used in an os command (‘os command injection’) in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands via FortiManager cli.

CPENameOperatorVersion
fortianalyzereq7.4.0
fortianalyzerge7.2.0
fortianalyzerle7.2.3
fortianalyzerge7.0.0
fortianalyzerle7.0.8
fortianalyzerge6.4.0
fortianalyzerle6.4.12
fortianalyzerge6.2.0
fortianalyzerle6.2.11
fortimanagerge6.2.0

Name	Operator	Version
fortianalyzer	eq	7.4.0
fortianalyzer	ge	7.2.0
fortianalyzer	le	7.2.3
fortianalyzer	ge	7.0.0
fortianalyzer	le	7.0.8
fortianalyzer	ge	6.4.0
fortianalyzer	le	6.4.12
fortianalyzer	ge	6.2.0
fortianalyzer	le	6.2.11
fortimanager	ge	6.2.0

Rows per page:

1-10 of 181

References

fortiguard.com/psirt/FG-IR-23-169