HIGH🇬🇧 English

CVE-2022-33869

CVSS 8.8v3.1pub. 2023-02-16upd. 2024-11-21

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Fortinet Fortiwan

    APP
    Fortinet
    4.1.14.1.24.1.34.2.14.2.24.2.54.2.64.2.74.3.04.3.14.4.04.4.14.5.0 – 4.5.10 (bez)4.0.0 – 4.0.6
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Command Injection
CWE
Referencje

Powiązane podatności

CVE-2021-26102CRITICAL9.8PL ✓ten sam produkt

Path traversal umożliwiający usunięcie plików i reset hasła admina w FortiWAN

CVE-2021-26114CRITICAL9.8ten sam produkt

Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before...

CVE-2021-26115HIGH7.8ten sam produkt

An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may ...

CVE-2023-44251HIGH8.3ten sam produkt

** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal'...

CVE-2023-44252HIGH8.8ten sam produkt

** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version...