CVE-2024-33508

An improper neutralization of special elements used in a command 'Command Injection' vulnerability CWE-77 in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthenticated attacker to execute limited and temporary operations on the underlying database via crafted...

CVE-2024-33508

creationtimestamp| type| source ---|---|--- 2024-09-10 18:25:15+00:00| seen| https://t.me/cvedetector/5246...

CVE-2024-33508

Fortinet FortiClientEMS is affected by CVE-2024-33508 through improper neutralization of special elements in a command, enabling an unauthenticated attacker to perform limited, temporary operations on the underlying database via crafted requests. Affected versions are FortiClientEMS 7.0.0–7.0.12 ...