CVE-2022-35849

CVSS V2 None CVSS V3 None

Description

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and 6.1.0 all versions may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Overview

CVE ID
CVE-2022-35849

Assigner
fortinet

Vulnerability Status
PUBLISHED

Published Version
2023-09-13T12:30:04.264Z

Last Modified Date
2023-09-13T12:30:04.264Z

Weakness Enumerations

CWE	URL
CWE-78	http://cwe.mitre.org/data/definitions/78.html

References

Reference URL	Reference Tags
https://fortiguard.com/psirt/FG-IR-22-310

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-35849
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35849

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 18:16:55				Added to TrackCVE