Skip to content
fr Sign in
8.0 High

CVE-2022-33869 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management…

Description

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Affected products and versions

Product Affected versions Fixed in
FortiWAN 4.5 4.5.0 → 4.5.9 No fix stated
FortiWAN 4.4 4.4.0 → 4.4.1 No fix stated
FortiWAN 4.3 4.3.0 → 4.3.1 No fix stated
FortiWAN 4.2 4.2.1 → 4.2.7 No fix stated
FortiWAN 4.1 4.1.1 → 4.1.3 No fix stated
FortiWAN 4.0 4.0.0 → 4.0.6 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiWAN

The 5 CVEs of FortiWAN →
CVE-2021-26102 A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a… 9.8 Critical CVE-2021-26115 An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a… 7.6 High CVE-2023-44251 ** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal')… 8.1 High CVE-2023-44252 ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0… 8.6 High
Track this CVE