Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wvcg-79hq-qf6v

Опубликовано: 16 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

EPSS

Процентиль: 70%
0.00645
Низкий

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
nvd
почти 3 года назад

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

CVSS3: 8.8
fstec
почти 3 года назад

Уязвимость веб-интерфейса системы балансировки трафика FortiWAN, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 70%
0.00645
Низкий

8.8 High

CVSS3

Дефекты

CWE-78