Command injection

2024-02-0514:15:00

PRIOn knowledge base

www.prio-n.com

command injection

fortinet fortisiem

vulnerability

unauthorized code execution

api requests

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.5%

JSON

An improper neutralization of special elements used in an os command (‘os command injection’) in Fortinet FortiSIEM version 7.1.0 through 7.1.1 and 7.0.0 through 7.0.2 and 6.7.0 through 6.7.8 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.2 and 6.4.0 through 6.4.2 allows attacker to execute unauthorized code or commands via via crafted API requests.

CPENameOperatorVersion
fortisiemge6.6.0
fortisiemle6.6.3
fortisiemeq7.1.1
fortisiemeq7.1.0
fortisiemge7.0.0
fortisiemle7.0.2
fortisiemge6.7.0
fortisiemle6.7.8
fortisiemge6.5.0
fortisiemle6.5.2

Name	Operator	Version
fortisiem	ge	6.6.0
fortisiem	le	6.6.3
fortisiem	eq	7.1.1
fortisiem	eq	7.1.0
fortisiem	ge	7.0.0
fortisiem	le	7.0.2
fortisiem	ge	6.7.0
fortisiem	le	6.7.8
fortisiem	ge	6.5.0
fortisiem	le	6.5.2