Vulnerabilitycritical

Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits

The Hacker Newsby @TheHackersNewsDec 23, 2024 · 05:21 UTC (Dec 23, 2024)3 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2023-34990 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-34990 CVE-2023-48782 CVE-2024-48889

Tags: cve-2023-34990 cve-2023-48782 cve-2024-48889 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Published
CVE-2023-34990	Unauthenticated Path Traversal to Code Execution in Fortinet FortiWLM	9.8	25%	Dec 18, 2024
CVE-2023-48782	A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 allows attacker…	8.8	3%	Dec 13, 2023
CVE-2024-48889	An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiManager version 7.6.0, version…	7.2	2%	Dec 18, 2024

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Dec 19, 2024 Vulnerability / Network Security Fortinet has issued an advisory for a now-patched critical security flaw impacting Wireless LAN Manager (FortiWLM) that could lead to disclosure of sensitive information. The vulnerability, tracked as CVE-2023-34990, carries a CVSS score of 9. 6 out of a maximum of 10.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.