Skip to content
fr Sign in
6.8 Medium

CVE-2022-33873 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]…

Description

An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Console login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to execute arbitrary command in the underlying shell.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiTester Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiTester

The 8 CVEs of Fortinet FortiTester →
CVE-2022-33870 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line… 7.8 High CVE-2022-38372 A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0… 6.7 Medium CVE-2022-33872 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 9.8 Critical CVE-2022-33874 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 9.8 Critical
Track this CVE