Skip to content
fr Sign in
7.2 High

CVE-2021-24009 Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of…

Description

Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary commands on the underlying system's shell via specifically crafted HTTP requests.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiWAN Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiWAN

The 6 CVEs of Fortinet FortiWAN →
CVE-2021-26113 A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker… 6.2 Medium CVE-2021-32585 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow… 7.2 High CVE-2021-32593 A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN… 6.5 Medium CVE-2021-26114 Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may… 9.8 Critical
Track this CVE