Skip to content
fr Sign in
9.8 Critical

CVE-2022-33874 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]…

Description

An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in SSH login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in the underlying shell.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiTester Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fortinet FortiTester

The 8 CVEs of Fortinet FortiTester →
CVE-2022-33870 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line… 7.8 High CVE-2022-38372 A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0… 6.7 Medium CVE-2022-33872 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 9.8 Critical CVE-2022-33873 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 6.8 Medium
Track this CVE