CVE-2023-25607

CVE-2023-25607 describes an OS Command Injection in Fortinet management interfaces due to unsafe usage of wordexp. Affected products include FortiManager (versions 6.0–7.2.2), FortiAnalyzer (6.0–7.2.2), and FortiADC (6.0–7.1.0). The vulnerability can allow an authenticated attacker with at least ...

CVE-2023-25607

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions, FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 throug...

CVE-2023-36547

Fortinet FortiWLM is affected by CVE-2023-36547 through OS command injection in FortiWLM 8.6.0–8.6.5 and 8.5.0–8.5.4. The root cause is improper neutralization of special elements in HTTP GET parameters, enabling an attacker to execute arbitrary code or commands. Functionally, impact is high (una...

CVE-2023-36549

Fortinet FortiWLM contains an os command injection in FortiWLM 8.5.0–8.5.4 and 8.6.0–8.6.5 due to improper neutralization of special elements in HTTP GET parameters. This allows an attacker to execute arbitrary commands over the network with high impact (CVE-2023-36549). Remediation/status detail...

CVE-2023-34989

Fortinet FortiWLM contains an OS command injection vulnerability (CVE-2023-34989) in FortiWLM versions 8.6.0–8.6.5 and 8.5.0–8.5.4. The flaw arises from improper neutralization of special elements in HTTP GET parameters, allowing an attacker to execute arbitrary code or commands remotely. CVSS v3...

CVE-2023-34987

Fortinet FortiWLM is affected by an OS command injection caused by improper neutralization of special elements in OS command handling. Versions 8.6.0–8.6.5 and 8.5.0–8.5.4 are vulnerable to remote exploitation via specifically crafted HTTP GET parameters, enabling an attacker to execute unauthori...

CVE-2023-34986

Fortinet FortiWLM (versions 8.5.0–8.5.4 and 8.6.0–8.6.5) is affected by an OS command injection due to improper neutralization of special elements in HTTP GET parameters. This vulnerability could allow an attacker to execute arbitrary code or commands. The issue is triggered by crafted HTTP GET r...

CVE-2023-34985

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters...

CVE-2023-34985

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters...

CVE-2023-34988

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters...

CVE-2023-34992

CVE-2023-34992 affects Fortinet FortiSIEM (report server) with an OS command injection via crafted API requests. Root cause: improper neutralization of special elements in OS command handling (CWE-78). Impact: remote unauthenticated attacker can execute arbitrary commands, potentially as root, on...

CVE-2023-34992

A improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet allows attacker to execute unauthorized code or commands via crafted API requests...

CVE-2023-41838

Fortinet FortiManager is affected by an OS command injection in the CLI due to improper neutralization of special elements. Affects FortiManager versions 7.2.0–7.2.3 and 7.4.0. The issue could allow execution of unauthorized code or commands via the FortiManager CLI. No exploit status is provided...

CVE-2023-42788

CVE-2023-42788 affects Fortinet FortiManager and FortiAnalyzer. A local attacker with low privileges can exploit an OS Command Injection in CLI handling to run unauthorized code via crafted arguments. Vulnerable versions include 7.4.0; 7.2.0–7.2.3; 7.0.0–7.0.8; 6.4.0–6.4.12; and 6.2.0–6.2.11. Roo...

CVE-2023-42788

An improper neutralization of special elements used in an os command 'OS Command Injection' vulnerability CWE-78 in FortiManager & FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.8, version 6.4.0 through 6.4.12 and version 6.2.0 through 6.2.11 may allow a local...

CVE-2023-30806

Sangfor NGAF (Next-Gen Application Firewall) version NGAF8.0.17 is affected by an OS command injection vulnerability exploitable via a crafted HTTP POST to /cgi-bin/login.cgi due to mishandling of shell meta-characters in the PHPSESSID cookie. The issue is remote and unauthenticated with potentia...

CVE-2023-30805

CVE-2023-30805 - Sangfor NGAF Affected: Sangfor Next-Gen Application Firewall NGAF version 8.0.17. Vulnerability: An operating system command injection vulnerability exists when processing the value of the un parameter sent via an HTTP POST to /LogInOut.php . Root cause cited as mishandling of sh...

PT-2023-6018 · Fortinet · Fortiwlm

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWLM versions 8.5.0 through 8.5.4 Fortinet FortiWLM versions 8.6.0 through 8.6.5 Description: The issue is related to an improper neutralization of special elements used in an OS command, also known as 'OS command injection'. Thi...

PT-2023-6017 · Fortinet · Fortiwlm

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWLM versions 8.5.0 through 8.5.4 Fortinet FortiWLM versions 8.6.0 through 8.6.5 Description: The issue is related to insufficient checking of arguments passed to a command, allowing a remote attacker to execute arbitrary code...

Ruijie Reyee Mesh Router - MITM Remote Code Execution Exploit

Exploit Title: Ruijie Reyee Wireless Router firmware version B11P204 - MITM Remote Code Execution RCE Date: April 15, 2023 Exploit Author: Mochammad Riyan Firmansyah of SecLab Indonesia Vendor Homepage: https://ruijienetworks.com Software Link:...