High severity8.3NVD Advisory· Published Dec 13, 2023· Updated Jun 17, 2026
CVE-2022-27488
CVE-2022-27488
Description
A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x, FortiNDR version 1.x.x allows a remote unauthenticated attacker to execute commands on the CLI via tricking an authenticated administrator to execute malicious GET requests.
Affected products
18cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*range: >=2.6.0,<=2.6.3
- (no CPE)range: 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x
- (no CPE)range: 6.4.0
cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.11
- (no CPE)range: 6.4.0
cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.7
- (no CPE)range: 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x
- (no CPE)range: 7.0.0
- Range: 6.4.x, 6.0.x
Patches
Vulnerability mechanics
References
1- fortiguard.com/psirt/FG-IR-22-038nvdVendor Advisory
News mentions
0No linked articles in our index yet.