7.6
High
CVE-2023-37937 An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch…
Description
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via the FortiSwitch CLI.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiSwitch | 7.4.0 | No fix stated |
| FortiSwitch 7.2 | 7.2.0 → 7.2.5 | No fix stated |
| FortiSwitch 7.0 | 7.0.0 → 7.0.7 | No fix stated |
| FortiSwitch 6.4 | 6.4.0 → 6.4.13 | No fix stated |
| FortiSwitch 6.2 | 6.2.0 → 6.2.7 | No fix stated |
| FortiSwitch 6.0 | 6.0.0 → 6.0.7 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiSwitch
The 9 CVEs of FortiSwitch →
CVE-2026-106175
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
2.1
Low
CVE-2024-48887
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to…
9.3
Critical
CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
4.1
Medium
CVE-2023-37936
A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through…
9.6
Critical