VYPR
← All advisories
Critical severity10.0NVD Advisory· Published Oct 10, 2023· Updated Jun 17, 2026

CVE-2023-34992

CVE-2023-34992

Description

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via crafted API requests.

Affected products

8
  • Fortinet/FortiSIEM7 versions
    cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*range: >=6.6.0,<=6.6.3
    • cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*
  • Fortinet/Fortinetllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.