Skip to content
fr Sign in
8.8 High

CVE-2021-43075 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM…

Description

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and below, version 8.3.2 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the alarm dashboard and controller config handlers.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiWLM Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiWLM

The 8 CVEs of Fortinet FortiWLM →
CVE-2021-43070 Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and… 5.4 Medium CVE-2021-43077 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version… 8.8 High CVE-2021-42752 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version… 5.4 Medium CVE-2021-42760 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version… 8.8 High
Track this CVE