| IR Number | FG-IR-22-186 |
| Date | Apr 11, 2023 |
| Component | GUI |
| Severity |
Medium |
| CVSSv3 Score | 6.5 |
| Impact | Execute unauthorized code or commands |
| CVE ID | CVE-2022-43948 |
| Affected Products |
FortiWeb
:
7.0.3, 7.0.2, 7.0.1, 7.0.0
FortiADC
:
7.1.1, 7.1.0, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.6, 6.1.5, 6.1.4, 6.1.3, 6.1.2, 6.1.1, 6.1.0, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5.1.3, 5.1.2, 5.1.1, 5.1.0
|
| CVRF | Download |
Refine Search
PSIRT Advisories
FortiWeb & FortiADC - OS command injection in CLI
Summary
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiWeb & FortiADC may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.
Affected Products
FortiWeb version 7.0.0 through 7.0.3FortiADC version 7.1.0 through 7.1.1
FortiADC version 7.0.0 through 7.0.3
FortiADC 6.2 all versions
FortiADC 6.1 all versions
FortiADC 6.0 all versions
FortiADC 5.4 all versions
FortiADC 5.3 all versions
FortiADC 5.2 all versions
FortiADC 5.1 all versions
Solutions
Please upgrade to FortiWeb version 7.2.0 or abovePlease upgrade to FortiWeb version 7.0.4 or above
Please upgrade to FortiADC version 7.2.0 or above
Please upgrade to FortiADC version 7.1.2 or above
Please upgrade to FortiADC version 7.0.4 or above