6.5
Medium
CVE-2024-54025 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
Description
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator CLI before version 2.4.6 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiIsolator 2.4 | 2.4.3 → 2.4.6 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiIsolator
The 7 CVEs of FortiIsolator →
CVE-2024-33507
An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in…
7.0
High
CVE-2024-32124
An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions…
4.0
Medium
CVE-2024-27779
An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version…
6.3
Medium
CVE-2024-54024
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
7.0
High