Skip to content
OpenAdvisories
High · 7.8 CVE-2022-33870 EUVD-2022-36909GHSA-xcwx-v6r5-6jgq

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiTester …

Published Nov 2, 2022 · Updated Oct 25, 2024 · Assigned by fortinet

Description

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiTester FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 —

References