8.6
High
CVE-2024-55590 Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities…
Description
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiIsolator version 2.4.0 through 2.4.5 allows an authenticated attacker with at least read-only admin permission and CLI access to execute unauthorized code via specifically crafted CLI commands.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiIsolator 2.4 | 2.4.0 → 2.4.5 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiIsolator
The 7 CVEs of FortiIsolator →
CVE-2024-33507
An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in…
7.0
High
CVE-2024-32124
An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions…
4.0
Medium
CVE-2024-27779
An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version…
6.3
Medium
CVE-2024-54024
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
7.0
High