Lucene search

K
hiveproHiveForce LabHIVEPRO:159605AD9067CB03E3900FC6280E716B
HistoryJan 06, 2023 - 2:09 p.m.

Several vulnerabilities are addressed by Fortinet across its product range

2023-01-0614:09:18
HiveForce Lab
www.hivepro.com
16
fortinet
vulnerabilities
fortiadc
high-severity
command injection
cve-2022-39947
input validation
web gui
authenticated user
http request
arbitrary os commands

EPSS

0.001

Percentile

49.1%

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Fortinet addressed security vulnerabilities across its products, most notably FortiADC, which has a high-severity command injection bug listed as CVE-2022-39947 due to incorrect input validation in the web GUI. A remotely authenticated user can send a specially crafted HTTP request to the software, allowing them to execute arbitrary OS commands on the victim system.

EPSS

0.001

Percentile

49.1%

Related for HIVEPRO:159605AD9067CB03E3900FC6280E716B