6.8
Moyenne
CVE-2022-33873 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]…
Description
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Console login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to execute arbitrary command in the underlying shell.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fortinet FortiTester | Versions non publiées |
Références
- fortiguard.com fortiguard.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Fortinet FortiTester
Les 8 CVE de Fortinet FortiTester →
CVE-2022-33870
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line…
7.8
Élevée
CVE-2022-38372
A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0…
6.7
Moyenne
CVE-2022-33872
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]…
9.8
Critique
CVE-2022-33874
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]…
9.8
Critique