CVE-2024-23109

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests...

Critical Patches Released for New Flaws in Cisco, Fortinet, VMware Products

Cisco, Fortinet, and VMware have released security fixes for multiple security vulnerabilities, including critical weaknesses that could be exploited to perform arbitrary actions on affected devices. The first set from Cisco consists of three flaws – CVE-2024-20252 and CVE-2024-20254 CVSS score:...

CVE-2024-23109

creationtimestamp| type| source ---|---|--- 2024-02-05 15:26:29+00:00| seen| https://t.me/ctinow/179263 2024-02-07 14:20:05+00:00| seen| https://t.me/truesecator/5386 2024-02-08 12:16:36+00:00| seen| https://t.me/itsecnews/4092 2024-02-29 09:27:08+00:00| seen| https://t.me/ctinow/196398 2024-03-2...

CVE-2024-23109

CVE-2024-23109 is a Fortinet FortiSIEM OS command injection vulnerability caused by improper neutralization of special elements in API requests, enabling remote code execution. Connected sources confirm FortiSIEM as the affected product and describe exploitation via crafted API calls. Affected ve...

CVE-2024-23109

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests...