Skip to content
OpenAdvisories
High · 7.8 CVE-2022-39953 EUVD-2022-42397GHSA-p6h3-h8g8-59fx

A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.…

Published Mar 7, 2023 · Updated Oct 23, 2024 · Assigned by fortinet

Vendor: Fortinet Product: FortiNAC Category: Network devices

Description

A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.1.0 through 9.1.8, FortiNAC all versions 8.8, FortiNAC all versions 8.7, FortiNAC all versions 8.6, FortiNAC all versions 8.5, FortiNAC version 8.3.7 allows attacker to escalation of privilege via specially crafted commands.

Affected products

VendorProductAffectedFixed
Fortinet FortiNAC 9.4.0 – ≤ 9.4.1, 9.2.0 – ≤ 9.2.6, 9.1.0 – ≤ 9.1.8, 8.8.0 – ≤ 8.8.11, 8.7.0 – ≤ 8.7.6, 8.6.0 – ≤ 8.6.5, 8.5.0 – ≤ 8.5.4, 8.3.7 —

References