Lucene search

K
cveFortinetCVE-2023-40717
HistorySep 13, 2023 - 1:15 p.m.

CVE-2023-40717

2023-09-1313:15:09
CWE-798
fortinet
web.nvd.nist.gov
16
cve-2023-40717
nvd
fortitester
hard-coded credentials
cwe-798
security vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0

Percentile

9.0%

A use of hard-coded credentials vulnerability [CWE-798] inΒ FortiTesterΒ 2.3.0 through 7.2.3 may allow an attacker who managed to get a shell on the device to access the database via shell commands.

Affected configurations

Nvd
Node
fortinetfortitesterRange2.3.0–7.2.3
VendorProductVersionCPE
fortinetfortitester*cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "Fortinet",
    "product": "FortiTester",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.2.0",
        "lessThanOrEqual": "7.2.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.1.0",
        "lessThanOrEqual": "7.1.1",
        "status": "affected"
      },
      {
        "version": "7.0.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "4.2.0",
        "lessThanOrEqual": "4.2.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "4.1.0",
        "lessThanOrEqual": "4.1.1",
        "status": "affected"
      },
      {
        "version": "4.0.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "3.9.0",
        "lessThanOrEqual": "3.9.2",
        "status": "affected"
      },
      {
        "version": "3.8.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "3.7.0",
        "lessThanOrEqual": "3.7.1",
        "status": "affected"
      },
      {
        "version": "3.6.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "3.5.0",
        "lessThanOrEqual": "3.5.1",
        "status": "affected"
      },
      {
        "version": "3.4.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "3.3.0",
        "lessThanOrEqual": "3.3.1",
        "status": "affected"
      },
      {
        "version": "3.2.0",
        "status": "affected"
      },
      {
        "version": "3.1.0",
        "status": "affected"
      },
      {
        "version": "3.0.0",
        "status": "affected"
      },
      {
        "version": "2.9.0",
        "status": "affected"
      },
      {
        "version": "2.8.0",
        "status": "affected"
      },
      {
        "version": "2.7.0",
        "status": "affected"
      },
      {
        "version": "2.6.0",
        "status": "affected"
      },
      {
        "version": "2.5.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "2.4.0",
        "lessThanOrEqual": "2.4.1",
        "status": "affected"
      },
      {
        "version": "2.3.0",
        "status": "affected"
      }
    ]
  }
]

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVE-2023-40717