Command injection in log & report module

Command injection in log & report module Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-22-335 Final 1 1 2023-04-11T00:00:00 Current version 2023-04-11T00:00:00 2023-04-11T00:00:00 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC, FortiDDoS and FortiDDoS-F may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands. None Execute unauthorized code or commands FortiDDoS-F 6.5 all versions are not affectedFortiDDoS-F version 6.4.0FortiDDoS-F version 6.3.0 through 6.3.3FortiDDoS-F version 6.2.0 through 6.2.2FortiDDoS-F version 6.1.0 through 6.1.4FortiDDoS 5.7 all versions are not affectedFortiDDoS 5.6 all versionsFortiDDoS 5.5 all versionsFortiDDoS 5.4 all versionsFortiDDoS 5.3 all versionsFortiDDoS 5.2 all versionsFortiDDoS 5.1 all versionsFortiDDoS 5.0 all versionsFortiDDoS 4.7 all versionsFortiDDoS 4.6 all versionsFortiDDoS 4.5 all versionsFortiDDoS 4.4 all versionsFortiDDoS 4.3 all versionsFortiDDoS 4.2 all versionsFortiDDoS 4.1 all versionsFortiDDoS 4.0 all versionsFortiADC 7.2 all versions are not affectedFortiADC version 7.1.0FortiADC version 7.0.0 through 7.0.3FortiADC version 6.2.0 through 6.2.4FortiADC 6.1 all versionsFortiADC 6.0 all versionsFortiADC 5.4 all versionsFortiADC 5.3 all versionsFortiADC 5.2 all versionsFortiADC 5.1 all versionsFortiADC 5.0 all versions Please upgrade to FortiDDoS-F version 6.4.1 or abovePlease upgrade to FortiDDoS-F version 6.3.4 or abovePlease upgrade to FortiDDoS-F version 6.2.3 or abovePlease upgrade to FortiDDoS-F version 6.1.5 or abovePlease upgrade to FortiDDoS version 5.7.0 or abovePlease upgrade to FortiDDoS version 5.6.2 or abovePlease upgrade to FortiDDoS version 5.5.2 or abovePlease upgrade to FortiDDoS version 5.4.3 or abovePlease upgrade to FortiADC version 7.1.1 or abovePlease upgrade to FortiADC version 7.0.4 or abovePlease upgrade to FortiADC version 6.2.5 or above FortiADC 7.1.0 FortiADC 7.0.3 FortiADC 7.0.2 FortiADC 7.0.1 FortiADC 7.0.0 FortiADC 6.2.4 FortiADC 6.2.3 FortiADC 6.2.2 FortiADC 6.2.1 FortiADC 6.2.0 FortiADC 6.1.6 FortiADC 6.1.5 FortiADC 6.1.4 FortiADC 6.1.3 FortiADC 6.1.2 FortiADC 6.1.1 FortiADC 6.1.0 FortiADC 6.0.4 FortiADC 6.0.3 FortiADC 6.0.2 FortiADC 6.0.1 FortiADC 6.0.0 FortiADC 5.4.5 FortiADC 5.4.4 FortiADC 5.4.3 FortiADC 5.4.2 FortiADC 5.4.1 FortiADC 5.4.0 FortiADC 5.3.7 FortiADC 5.3.6 FortiADC 5.3.5 FortiADC 5.3.4 FortiADC 5.3.3 FortiADC 5.3.2 FortiADC 5.3.1 FortiADC 5.3.0 FortiADC 5.2.8 FortiADC 5.2.7 FortiADC 5.2.6 FortiADC 5.2.5 FortiADC 5.2.4 FortiADC 5.2.3 FortiADC 5.2.2 FortiADC 5.2.1 FortiADC 5.2.0 FortiADC 5.1.7 FortiADC 5.1.6 FortiADC 5.1.5 FortiADC 5.1.4 FortiADC 5.1.3 FortiADC 5.1.2 FortiADC 5.1.1 FortiADC 5.1.0 FortiADC 5.0.4 FortiADC 5.0.3 FortiADC 5.0.2 FortiADC 5.0.1 FortiADC 5.0.0 FortiDDoS 5.6.2 FortiDDoS 5.6.1 FortiDDoS 5.6.0 FortiDDoS 5.5.2 FortiDDoS 5.5.1 FortiDDoS 5.5.0 FortiDDoS 5.4.3 FortiDDoS 5.4.2 FortiDDoS 5.4.1 FortiDDoS 5.4.0 FortiDDoS 5.3.2 FortiDDoS 5.3.1 FortiDDoS 5.3.0 FortiDDoS 5.2.0 FortiDDoS 5.1.0 FortiDDoS 5.0.0 FortiDDoS 4.7.0 FortiDDoS 4.6.0 FortiDDoS 4.5.0 FortiDDoS 4.4.2 FortiDDoS 4.4.1 FortiDDoS 4.4.0 FortiDDoS 4.3.2 FortiDDoS 4.3.1 FortiDDoS 4.3.0 FortiDDoS 4.2.3 FortiDDoS 4.2.2 FortiDDoS 4.2.1 FortiDDoS 4.2.0 FortiDDoS 4.1.12 FortiDDoS 4.1.11 FortiDDoS 4.1.10 FortiDDoS 4.1.9 FortiDDoS 4.1.8 FortiDDoS 4.1.7 FortiDDoS 4.1.6 FortiDDoS 4.1.5 FortiDDoS 4.1.4 FortiDDoS 4.1.3 FortiDDoS 4.1.2 FortiDDoS 4.1.1 FortiDDoS 4.1.0 FortiDDoS 4.0.1 FortiDDoS 4.0.0 FortiDDoS-F 6.4.0 FortiDDoS-F 6.3.3 FortiDDoS-F 6.3.2 FortiDDoS-F 6.3.1 FortiDDoS-F 6.3.0 FortiDDoS-F 6.2.2 FortiDDoS-F 6.2.1 FortiDDoS-F 6.2.0 FortiDDoS-F 6.1.4 FortiDDoS-F 6.1.3 FortiDDoS-F 6.1.2 FortiDDoS-F 6.1.1 FortiDDoS-F 6.1.0 Command injection in log & report module CVE-2022-40679 FortiADC-7.1.0 FortiADC-7.0.3 FortiADC-7.0.2 FortiADC-7.0.1 FortiADC-7.0.0 FortiADC-6.2.4 FortiADC-6.2.3 FortiADC-6.2.2 FortiADC-6.2.1 FortiADC-6.2.0 FortiADC-6.1.6 FortiADC-6.1.5 FortiADC-6.1.4 FortiADC-6.1.3 FortiADC-6.1.2 FortiADC-6.1.1 FortiADC-6.1.0 FortiADC-6.0.4 FortiADC-6.0.3 FortiADC-6.0.2 FortiADC-6.0.1 FortiADC-6.0.0 FortiADC-5.4.5 FortiADC-5.4.4 FortiADC-5.4.3 FortiADC-5.4.2 FortiADC-5.4.1 FortiADC-5.4.0 FortiADC-5.3.7 FortiADC-5.3.6 FortiADC-5.3.5 FortiADC-5.3.4 FortiADC-5.3.3 FortiADC-5.3.2 FortiADC-5.3.1 FortiADC-5.3.0 FortiADC-5.2.8 FortiADC-5.2.7 FortiADC-5.2.6 FortiADC-5.2.5 FortiADC-5.2.4 FortiADC-5.2.3 FortiADC-5.2.2 FortiADC-5.2.1 FortiADC-5.2.0 FortiADC-5.1.7 FortiADC-5.1.6 FortiADC-5.1.5 FortiADC-5.1.4 FortiADC-5.1.3 FortiADC-5.1.2 FortiADC-5.1.1 FortiADC-5.1.0 FortiADC-5.0.4 FortiADC-5.0.3 FortiADC-5.0.2 FortiADC-5.0.1 FortiADC-5.0.0 FortiDDoS-5.6.2 FortiDDoS-5.6.1 FortiDDoS-5.6.0 FortiDDoS-5.5.2 FortiDDoS-5.5.1 FortiDDoS-5.5.0 FortiDDoS-5.4.3 FortiDDoS-5.4.2 FortiDDoS-5.4.1 FortiDDoS-5.4.0 FortiDDoS-5.3.2 FortiDDoS-5.3.1 FortiDDoS-5.3.0 FortiDDoS-5.2.0 FortiDDoS-5.1.0 FortiDDoS-5.0.0 FortiDDoS-4.7.0 FortiDDoS-4.6.0 FortiDDoS-4.5.0 FortiDDoS-4.4.2 FortiDDoS-4.4.1 FortiDDoS-4.4.0 FortiDDoS-4.3.2 FortiDDoS-4.3.1 FortiDDoS-4.3.0 FortiDDoS-4.2.3 FortiDDoS-4.2.2 FortiDDoS-4.2.1 FortiDDoS-4.2.0 FortiDDoS-4.1.12 FortiDDoS-4.1.11 FortiDDoS-4.1.10 FortiDDoS-4.1.9 FortiDDoS-4.1.8 FortiDDoS-4.1.7 FortiDDoS-4.1.6 FortiDDoS-4.1.5 FortiDDoS-4.1.4 FortiDDoS-4.1.3 FortiDDoS-4.1.2 FortiDDoS-4.1.1 FortiDDoS-4.1.0 FortiDDoS-4.0.1 FortiDDoS-4.0.0 FortiDDoS-F-6.4.0 FortiDDoS-F-6.3.3 FortiDDoS-F-6.3.2 FortiDDoS-F-6.3.1 FortiDDoS-F-6.3.0 FortiDDoS-F-6.2.2 FortiDDoS-F-6.2.1 FortiDDoS-F-6.2.0 FortiDDoS-F-6.1.4 FortiDDoS-F-6.1.3 FortiDDoS-F-6.1.2 FortiDDoS-F-6.1.1 FortiDDoS-F-6.1.0 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R https://fortiguard.fortinet.com/psirt/FG-IR-22-335 Command injection in log & report module Reference>