Fiche vulnérabilité
CVE-2022-40679 : faille élevée Fortinet FortiDDoS (CVSS 7.1)
Description
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 5.x all versions, 6.0 all versions, 6.1 all versions, 6.2.0 through 6.2.4, 7.0.0 through 7.0.3, 7.1.0; FortiDDoS 4.x all versions, 5.0 all versions, 5.1 all versions, 5.2 all versions, 5.3 all versions, 5.4 all versions, 5.5 all versions, 5.6 all versions and FortiDDoS-F 6.4.0, 6.3.0 through 6.3.3, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.
En bref
- Sévérité
- Élevée (CVSS 7.1)
- Vecteur CVSS
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
- Exploitation active
- Non signalée par la CISA
- Publication
- 11 avr. 2023
- Dernière mise à jour
- 23 oct. 2024
Produits concernés
- Fortinet FortiDDoS
- Fortinet FortiDDoS-F
- Fortinet FortiADC
Correctif et mesures
Please upgrade to FortiDDoS-F version 6.4.1 or above Please upgrade to FortiDDoS-F version 6.3.4 or above Please upgrade to FortiDDoS-F version 6.2.3 or above Please upgrade to FortiDDoS-F version 6.1.5 or above Please upgrade to FortiDDoS version 5.7.0 or above Please upgrade to FortiADC version 7.1.1 or above Please upgrade to FortiADC version 7.0.4 or above Please upgrade to FortiADC version 6.2.5 or above