Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-27486

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS version 5.5.0 through 5.5.1, 5.4.2 through 5.4.0, 5.3.0 through 5.3.1, 5.2.0, 5.1.0, 5.0.0, 4.7.0, 4.6.0 and 4.5.0 and FortiDDoS-F version 6.3.0 through 6.3.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 allows an authenticated attacker to execute shell code as `root` via `execute` CLI commands.

Published

2024-08-13T16:15:07.693

Last Modified

2024-08-22T14:29:44.627

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.6 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortiddos < 5.6.2 Yes
Application fortinet fortiddos 5.7.0 Yes
Application fortinet fortiddos-f * Yes
Application fortinet fortiddos-f < 6.4.2 Yes
Application fortinet fortiddos-f 6.5.0 Yes
References