Skip to content
NewA calmer, faster ZeroHour
Vulnerability2 · 1 read

CVE-2023-34992

CVSS 3.1
9.8 critical
EPSS
80%p100
Published
·
Modified
Analyze CVE-2023-34992 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via crafted API requests.

Vendors
fortinet
Products
fortisiem
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

7 stories