VYPR
Unrated severityNVD Advisory· Published Nov 2, 2022· Updated Oct 25, 2024

CVE-2022-33870

CVE-2022-33870

Description

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Affected products

2
  • Range: >=3.0.0 <=3.9.1, >=4.0.0 <=4.2.0, >=7.0.0 <=7.1.0
  • Fortinet/Fortinetcpe-rescue
    Range: FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.