VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 16, 2023· Updated Jun 17, 2026

CVE-2022-27482

CVE-2022-27482

Description

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.6, 6.0.x, 5.x.x allows attacker to execute arbitrary shell code as root via CLI commands.

Affected products

5
  • Fortinet/Fortiadc 200d4 versions
    cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*range: >=5.0.0,<=5.0.4
    • cpe:2.3:a:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*
    • (no CPE)range: 7.0.0
  • Fortinet/FortiADC-Ellm-fuzzy
    Range: 7.0.0-7.0.1, 6.2.0-6.2.2, 6.1.0-6.1.6, 6.0.x, 5.x.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.