| IR Number | FG-IR-22-062 |
| Date | May 3, 2022 |
| Severity |
Medium |
| CVSSv3 Score | 6.8 |
| Impact | Execute unauthorized code or commands |
| CVE ID | CVE-2022-26116 |
| Affected Products |
FortiNAC
:
9.2.2, 9.2.1, 9.2.0, 9.1.5, 9.1.4, 9.1.3, 9.1.2, 9.1.1, 9.1.0, 8.8.9, 8.8.8, 8.8.7, 8.8.6, 8.8.5, 8.8.4, 8.8.3, 8.8.2, 8.8.11, 8.8.10, 8.8.1, 8.8.0, 8.7.6, 8.7.5, 8.7.4, 8.7.3, 8.7.2, 8.7.1, 8.7.0, 8.6.5, 8.6.4, 8.6.3, 8.6.2, 8.6.0, 8.5.4, 8.5.2, 8.5.1, 8.5.0, 8.3.7
|
| CVRF | Download |
Refine Search
PSIRT Advisories
FortiNAC - SQL Injection
Summary
Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in FortiNAC may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.
Affected Products
FortiNAC version 8.3.7FortiNAC version 8.5.0 through 8.5.2
FortiNAC version 8.5.4
FortiNAC version 8.6.0
FortiNAC version 8.6.2 through 8.6.5
FortiNAC version 8.7.0 through 8.7.6
FortiNAC version 8.8.0 through 8.8.11
FortiNAC version 9.1.0 through 9.1.5
FortiNAC version 9.2.0 through 9.2.2
Solutions
Upgrade to FortiNAC version 10.0.0 or above,
Upgrade to FortiNAC version 9.4.0 or above,
Upgrade to FortiNAC version 9.2.3 or above,
Upgrade to FortiNAC version 9.1.6 or above,