Fortinet FortiADC 安全漏洞

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. Fortinet FortiADC suffers from an Access Control Error vulnerability that stems from improper access control. An authenticated, low-privileged attacker could exploit the vulnerability to escalate their privileges to...

Fortinet FortiADC 安全漏洞

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. The Fortinet FortiADC suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit the vulnerability to execute arbitrary cod...

PT-2023-7384 · Fortinet · Fortiadc +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiADC versions 7.1.0 through 7.1.1 FortiDDoS-F versions 6.3.0 through 6.3.4 FortiDDoS-F versions 6.4.0 through 6.4.1 Description: A permissive cross-domain policy with untrusted domains vulnerability allows an unauthorized attacke...

Fortinet FortiADC Security Vulnerability

Fortinet FortiADC is an application delivery controller from Fortinet. A security vulnerability exists in Fortinet FortiADC that stems from a loose cross-domain policy. An unauthorized attacker could perform privileged operations and retrieve sensitive information via a crafted web request...

The vulnerability of the software interface for centralized device management in Fortinet’s FortiManager, FortiAnalyzer network switches, and FortiADC application delivery controller allows a perpetrator to execute arbitrary commands.

The vulnerability of the software interface for centralized device management in Fortinet’s FortiManager, FortiAnalyzer network monitoring devices, and FortiADC application delivery controller is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allow...

CVE-2023-25607

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions, FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 throug...

CVE-2023-25607

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions, FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 throug...

Command injection

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions, FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 throug...

CVE-2023-25607

CVE-2023-25607 describes an OS Command Injection in Fortinet management interfaces due to unsafe usage of wordexp. Affected products include FortiManager (versions 6.0–7.2.2), FortiAnalyzer (6.0–7.2.2), and FortiADC (6.0–7.1.0). The vulnerability can allow an authenticated attacker with at least ...

CVE-2023-25607

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions, FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 throug...

CVE-2023-25607

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions, FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 throug...

PT-2023-5995 · Fortinet · Fortianalyzer +2

Name of the Vulnerable Software and Affected Versions: FortiManager versions 6.0 through 7.2.2 FortiAnalyzer versions 6.0 through 7.2.2 FortiADC versions 6.0 through 7.1.0 Description: The issue is related to insufficient argument validation in a command, which can be exploited to execute arbitra...

Fortinet FortiManager and FortiAnalyzer and FortiADC Operating System Command Injection Vulnerability

Fortinet FortiManager and others are products of Fortinet, Inc.Fortinet FortiManager is a centralized network security management platform.Fortinet FortiAnalyzer is a centralized network security reporting solution.Fortinet FortiADC is an application delivery controller. Fortinet FortiADC is an...

CVE-2022-35849

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and 6.1.0 all versions may allow an authenticated attacker to execute unauthorized commands via...

CVE-2022-35849

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and 6.1.0 all versions may allow an authenticated attacker to execute unauthorized commands via...

Command injection

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and 6.1.0 all versions may allow an authenticated attacker to execute unauthorized commands via...

CVE-2022-35849

CVE-2022-35849 affects Fortinet FortiADC: an OS command injection vulnerability in the management interface. Affected FortiADC versions are 7.1.0–7.1.1, 7.0.0–7.0.3, 6.2.0–6.2.5, and 6.1.0 (all versions). The issue allows an authenticated attacker to execute unauthorized commands by supplying spe...

CVE-2022-35849

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and 6.1.0 all versions may allow an authenticated attacker to execute unauthorized commands via...

CVE-2022-35849

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and 6.1.0 all versions may allow an authenticated attacker to execute unauthorized commands via...

PT-2023-13449

Name of the Vulnerable Software and Affected Versions FortiADC versions 6.1.0 through 7.1.1 Description An improper neutralization of special elements used in an OS command vulnerability in the management interface of FortiADC may allow an authenticated attacker to execute unauthorized commands v...