9.6
Critical
CVE-2023-37936 A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through…
Description
A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via crafted requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiSwitch | 7.4.0 | No fix stated |
| FortiSwitch 7.2 | 7.2.0 → 7.2.5 | No fix stated |
| FortiSwitch 7.0 | 7.0.0 → 7.0.7 | No fix stated |
| FortiSwitch 6.4 | 6.4.0 → 6.4.13 | No fix stated |
| FortiSwitch 6.2 | 6.2.0 → 6.2.7 | No fix stated |
| FortiSwitch 6.0 | 6.0.0 → 6.0.7 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiSwitch
The 9 CVEs of FortiSwitch →
CVE-2026-106175
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
2.1
Low
CVE-2024-48887
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to…
9.3
Critical
CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
4.1
Medium
CVE-2023-37937
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch…
7.6
High