Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f6w7-3cg5-fhr8

Опубликовано: 19 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection (CWE-78) vulnerability in FortiWAN Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.

An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection (CWE-78) vulnerability in FortiWAN Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.

EPSS

Процентиль: 57%
0.00355
Низкий

7.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.8
nvd
около 1 года назад

An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection (CWE-78) vulnerability in FortiWAN Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.

CVSS3: 7.8
fstec
больше 4 лет назад

Уязвимость интерфейса командной строки системы балансировки трафика FortiWAN, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 57%
0.00355
Низкий

7.8 High

CVSS3

Дефекты

CWE-78