CVE-2024-23109

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests...

Critical Patches Released for New Flaws in Cisco, Fortinet, VMware Products

Cisco, Fortinet, and VMware have released security fixes for multiple security vulnerabilities, including critical weaknesses that could be exploited to perform arbitrary actions on affected devices. The first set from Cisco consists of three flaws – CVE-2024-20252 and CVE-2024-20254 CVSS score:...

CVE-2024-23109

creationtimestamp| type| source ---|---|--- 2024-02-05 15:26:29+00:00| seen| https://t.me/ctinow/179263 2024-02-07 14:20:05+00:00| seen| https://t.me/truesecator/5386 2024-02-08 12:16:36+00:00| seen| https://t.me/itsecnews/4092 2024-02-29 09:27:08+00:00| seen| https://t.me/ctinow/196398 2024-03-2...

CVE-2024-23109

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests...

CVE-2024-23109

The Fortinet FortiSIEM security information and event management system is vulnerable to an OS command injection vulnerability due to the improper neutralization of special elements. An unauthenticated remote attacker can exploit this flaw by sending crafted API requests to execute arbitrary comm...