Skip to content
OpenAdvisories
High · 7.8 CVE-2021-24023 EUVD-2021-10943GHSA-pc5v-x22v-m3rr

An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payl…

Published Jun 3, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiAI Category: Network devices

Description

An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiAI FortiAI 1.4.0 and earlier —

References