CVE-2022-40679
CVSS V2 None
CVSS V3 None
Description
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 5.x all versions, 6.0 all versions, 6.1 all versions, 6.2.0 through 6.2.4, 7.0.0 through 7.0.3, 7.1.0; FortiDDoS 4.x all versions, 5.0 all versions, 5.1 all versions, 5.2 all versions, 5.3 all versions, 5.4 all versions, 5.5 all versions, 5.6 all versions and FortiDDoS-F 6.4.0, 6.3.0 through 6.3.3, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.
Overview
- CVE ID
- CVE-2022-40679
- Assigner
- psirt@fortinet.com
- Vulnerability Status
- Analyzed
- Published Version
- 2023-04-11T17:15:07
- Last Modified Date
- 2023-04-18T20:44:17
Weakness Enumerations
CPE Configuration (Product)
CPE | Vulnerable | Operator | Version Start | Version End |
---|---|---|---|---|
cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:* | 1 | OR | 5.0.0 | 6.2.5 |
cpe:2.3:a:fortinet:fortiddos:*:*:*:*:*:*:*:* | 1 | OR | 4.0.0 | 5.7.0 |
cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:* | 1 | OR | 6.1.0 | 6.1.5 |
cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:* | 1 | OR | 6.2.0 | 6.2.3 |
cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:* | 1 | OR | 6.3.0 | 6.3.4 |
cpe:2.3:a:fortinet:fortiddos-f:6.4.0:*:*:*:*:*:*:* | 1 | OR |
References
Reference URL | Reference Tags |
---|---|
https://fortiguard.com/psirt/FG-IR-22-335 |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-40679 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40679 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2023-04-17 04:31:01 | Added to TrackCVE | |||
2023-04-17 14:00:50 | Awaiting Analysis | Undergoing Analysis | Vulnerability Status | updated |
2023-04-18 21:00:40 | 2023-04-18T20:44:17 | CVE Modified Date | updated | |
2023-04-18 21:00:40 | Undergoing Analysis | Analyzed | Vulnerability Status | updated |
2023-04-18 21:00:41 | Weakness Enumeration | new | ||
2023-04-18 21:00:43 | CPE Information | updated |