Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Fortinet FortiSwitch ausnutzen, um beliebigen Programmcode auszuführen.
Product
FortiSwitch bezeichnet die Ethernet Switch Produktfamilie von Fortinet.
Vulnerabilities 2
-
Critical 9.6
A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7…
-
High 7.6
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch v…
Revision history
-
#1
Initiale Fassung
References
-
FortiGuard PSIRT Advisory FG-IR-23-260 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-23-260
-
FortiGuard PSIRT Advisory FG-IR-23-258 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-23-258