Skip to content
fr Sign in
4.8 Medium

CVE-2023-33300 A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and…

Description

A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server communication port.

Affected products and versions

Product Affected versions Fixed in
FortiNAC 9.4 9.4.0 → 9.4.3 No fix stated
FortiNAC 7.2 7.2.0 → 7.2.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiNAC

The 23 CVEs of FortiNAC →
CVE-2024-31488 An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through… 6.1 Medium CVE-2023-26206 An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 -… 6.8 Medium CVE-2023-33299 A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier… 9.6 Critical CVE-2023-22633 An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and… 7.2 High
Track this CVE