OS command injection vulnerability in CLI Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-22-046 Final 1 1 2023-02-16T00:00:00 Current version 2023-02-16T00:00:00 2023-02-16T00:00:00 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiADC may allow an authenticated attacker to execute arbitrary shell code as root via CLI commands. None Execute unauthorized code or commands At leastFortiADC version 7.0.0 through 7.0.1FortiADC version 6.2.0 through 6.2.3FortiADC 6.1 all versionsFortiADC 6.0 all versionsFortiADC 5.4 all versionsFortiADC 5.3 all versionsFortiADC 5.2 all versionsFortiADC 5.1 all versionsFortiADC 5.0 all versions Please upgrade to FortiADC version 7.0.2 or above,Please upgrade to FortiADC version 6.2.4 or above. Internally discovered and reported by Théo Leleu of Fortinet Product Security team. CVE-2022-27482 7.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C https://fortiguard.fortinet.com/psirt/FG-IR-22-046 OS command injection vulnerability in CLI Reference>