OS command injection in CLI
Fortinet PSIRT Advisories
Fortinet PSIRT Contact:
Website: https://fortiguard.fortinet.com/faq/psirt-contact
FG-IR-22-186
Final
1
1
2023-04-11T00:00:00
Current version
2023-04-11T00:00:00
2023-04-11T00:00:00
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiWeb & FortiADC may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.
None
Execute unauthorized code or commands
Internally discovered and reported by Gwendal Guégniaud of Fortinet Product Security team.
FortiADC 7.1.1
FortiADC 7.1.0
FortiADC 7.0.3
FortiADC 7.0.2
FortiADC 7.0.1
FortiADC 7.0.0
FortiADC 6.2.6
FortiADC 6.2.5
FortiADC 6.2.4
FortiADC 6.2.3
FortiADC 6.2.2
FortiADC 6.2.1
FortiADC 6.2.0
FortiADC 6.1.6
FortiADC 6.1.5
FortiADC 6.1.4
FortiADC 6.1.3
FortiADC 6.1.2
FortiADC 6.1.1
FortiADC 6.1.0
FortiADC 6.0.4
FortiADC 6.0.3
FortiADC 6.0.2
FortiADC 6.0.1
FortiADC 6.0.0
FortiADC 5.4.5
FortiADC 5.4.4
FortiADC 5.4.3
FortiADC 5.4.2
FortiADC 5.4.1
FortiADC 5.4.0
FortiADC 5.3.7
FortiADC 5.3.6
FortiADC 5.3.5
FortiADC 5.3.4
FortiADC 5.3.3
FortiADC 5.3.2
FortiADC 5.3.1
FortiADC 5.3.0
FortiADC 5.2.8
FortiADC 5.2.7
FortiADC 5.2.6
FortiADC 5.2.5
FortiADC 5.2.4
FortiADC 5.2.3
FortiADC 5.2.2
FortiADC 5.2.1
FortiADC 5.2.0
FortiADC 5.1.7
FortiADC 5.1.6
FortiADC 5.1.5
FortiADC 5.1.4
FortiADC 5.1.3
FortiADC 5.1.2
FortiADC 5.1.1
FortiADC 5.1.0
FortiWeb 7.0.3
FortiWeb 7.0.2
FortiWeb 7.0.1
FortiWeb 7.0.0
OS command injection in CLI
CVE-2022-43948
FortiADC-7.1.1
FortiADC-7.1.0
FortiADC-7.0.3
FortiADC-7.0.2
FortiADC-7.0.1
FortiADC-7.0.0
FortiADC-6.2.6
FortiADC-6.2.5
FortiADC-6.2.4
FortiADC-6.2.3
FortiADC-6.2.2
FortiADC-6.2.1
FortiADC-6.2.0
FortiADC-6.1.6
FortiADC-6.1.5
FortiADC-6.1.4
FortiADC-6.1.3
FortiADC-6.1.2
FortiADC-6.1.1
FortiADC-6.1.0
FortiADC-6.0.4
FortiADC-6.0.3
FortiADC-6.0.2
FortiADC-6.0.1
FortiADC-6.0.0
FortiADC-5.4.5
FortiADC-5.4.4
FortiADC-5.4.3
FortiADC-5.4.2
FortiADC-5.4.1
FortiADC-5.4.0
FortiADC-5.3.7
FortiADC-5.3.6
FortiADC-5.3.5
FortiADC-5.3.4
FortiADC-5.3.3
FortiADC-5.3.2
FortiADC-5.3.1
FortiADC-5.3.0
FortiADC-5.2.8
FortiADC-5.2.7
FortiADC-5.2.6
FortiADC-5.2.5
FortiADC-5.2.4
FortiADC-5.2.3
FortiADC-5.2.2
FortiADC-5.2.1
FortiADC-5.2.0
FortiADC-5.1.7
FortiADC-5.1.6
FortiADC-5.1.5
FortiADC-5.1.4
FortiADC-5.1.3
FortiADC-5.1.2
FortiADC-5.1.1
FortiADC-5.1.0
FortiWeb-7.0.3
FortiWeb-7.0.2
FortiWeb-7.0.1
FortiWeb-7.0.0
6.5
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
https://fortiguard.fortinet.com/psirt/FG-IR-22-186
OS command injection in CLI
Reference>