Skip to content
OpenAdvisories
Unscored CVE-2020-29017 EUVD-2020-21399GHSA-m4cc-m73q-8mw7

An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to execute arbitrary c…

Published Jan 14, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Description

An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to execute arbitrary commands on the system by exploiting a command injection vulnerability on the Customization page.

Affected products

VendorProductAffectedFixed
— Fortinet FortiDeceptor FortiDeceptor 3.1.0, 3.0.1, 3.0.0 —

References