Lucene search
FortiGuard LabsFG-IR-22-280HistoryFeb 16, 2023 - 12:00 a.m.
FortiNAC - Multiple Command Injections in webserver
2023-02-1600:00:00
FortiGuard Labs
www.fortiguard.com
17
fortinac
command injection
cwe-78
webserver
arbitrary commands
EPSS
0.001
Percentile
43.3%
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the webserver of FortiNAC may allow a privileged attacker to execute arbitrary OS commands via specially crafted input parameters.
Related
nvd
nvd
CVE-2022-40677
2023-02-16 19:15:13
cvelist
cvelist
CVE-2022-40677
2023-02-16 18:06:57
cve
cve
CVE-2022-40677
2023-02-16 19:15:13
prion
prion
Input validation
2023-02-16 19:15:00