/Vulnerability Library

Fortinet FortiSIEM - Unauthenticated Command Injection

CVE-2023-34992
Verified

Description

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM versions 7.1.0 through 7.1.1, 7.0.0 through 7.0.2, 6.7.0 through 6.7.8, 6.6.0 through 6.6.3, 6.5.0 through 6.5.2, and 6.4.0 through 6.4.3 allows an unauthenticated attacker to execute unauthorized code or commands via crafted API requests.

Severity

Critical

CVSS Score

9.8

Exploit Probability

82%

Affected Product

fortisiem

Published Date

July 18, 2024

Template Author

thacien

CVE-2023-34992.yaml
9.8Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2023-34992
CWE ID:
cwe-78

References

https://nvd.nist.gov/vuln/detail/CVE-2023-34992https://www.horizon3.ai/attack-research/disclosures/cve-2023-34992-fortinet-fortisiem-command-injection-deep-dive/https://github.com/horizon3ai/CVE-2023-34992https://fortiguard.com/psirt/FG-IR-23-130

Remediation Steps

Upgrade to FortiSIEM version >=6.4.4, >=6.5.3, >=6.6.4, >=6.7.9, >=7.0.3, >=7.1.2