Vulnerabilitycritical

Fortinet addressed two critical FortiSIEM vulnerabilities

Security Affairsby @securityaffairsFeb 7, 2024 · 18:50 UTC (Feb 7, 2024)1 min read3 · 2 reads

Read at securityaffairs.com

Analyze CVE-2024-23108 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-23108 CVE-2024-23109 CVE-2023-34992

Tags: cve-2024-23108 cve-2024-23109 cve-2023-34992 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-34992	A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized…	9.8	80%		Oct 10, 2023
CVE-2024-23108 +1 related CVE CVE-2024-23109	An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized…	9.8	78%		Feb 5, 2024

From the original article

1 min read at securityaffairs.com

Fortinet warns of two critical OS command injection vulnerabilities in FortiSIEM that could allow remote attackers to execute arbitrary code Cybersecurity vendor Fortinet warned of two critical vulnerabilities in FortiSIEM, tracked as CVE-2024-23108 and CVE-2024-23109 (CVSS score 10), which could lead to remote code execution.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.