VulnerabilityhighExploited in the wild

Fortinet fixed command injection bugs in FortiADC and FortiTester

Security Affairsby @securityaffairsJan 4, 2023 · 15:17 UTC (Jan 4, 2023)1 min read1 · 1 read

Read at securityaffairs.com

Analyze CVE-2022-39947 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-39947 CVE-2022-35845

Tags: cve-2022-39947 cve-2022-35845 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-35845	Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiTester 7.1.0, 7.0 all…	8.8	1%		Jan 3, 2023
CVE-2022-39947	A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.2, FortiADC version…	8.8	3%		Jan 3, 2023

From the original article

1 min read at securityaffairs.com

Fortinet addressed multiple vulnerabilities impacting its products and warned of a high-severity command injection flaw in FortiADC. Cybersecurity vendor Fortinet addressed several vulnerabilities impacting its products. The compaby also warned customers of a high-severity command injection flaw, tracked as CVE-2022-39947 (CVSS score of 8.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.