VYPR
High severity8.3NVD Advisory· Published Dec 13, 2023· Updated Jun 17, 2026

CVE-2022-27488

CVE-2022-27488

Description

A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x, FortiNDR version 1.x.x allows a remote unauthenticated attacker to execute commands on the CLI via tricking an authenticated administrator to execute malicious GET requests.

Affected products

18
  • Fortinet/FortiAI2 versions
    cpe:2.3:a:fortinet:fortiai:1.1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiai:1.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiai:1.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.12
    • (no CPE)range: 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x
    • (no CPE)range: 7.0.0
  • Fortinet/Fortindr4 versions
    cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*range: >=7.0.0,<=7.0.4
    • cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*
    • (no CPE)range: 1.x.x
    • (no CPE)range: 7.1.0
  • cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*range: >=2.6.0,<=2.6.3
    • (no CPE)range: 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x
    • (no CPE)range: 6.4.0
  • cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.11
    • (no CPE)range: 6.4.0
  • cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.7
    • (no CPE)range: 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x
    • (no CPE)range: 7.0.0
  • Range: 6.4.x, 6.0.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.