CVE-2021-43075

published 2022-03-01

CVE-2021-43075: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and…

Priority P2 61 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and below, version 8.3.2 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the alarm dashboard and controller config handlers.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortinet	—	—
fortinet	fortinet_fortiwlm	—	—
fortinet	fortiwlm	<= 8.3.2	—
fortinet	fortiwlm	—	—
fortinet	fortiwlm	8.4.0 – 8.4.2	—
fortinet	fortiwlm	8.5.0 – 8.5.2	—
fortinet	fortiwlm	>= 8.6.0 < 8.6.3	8.6.3

Detection & IOCs extracted from sources · hover to see the quote

• → Monitor for crafted HTTP requests targeting the alarm dashboard handler in FortiWLM, which is an OS command injection vector ↗
• → Monitor for crafted HTTP requests targeting the controller config handler in FortiWLM, which is an OS command injection vector ↗

• · Vulnerability affects FortiWLM version 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, and 8.3.2 and below — ensure detection scope covers all these branches ↗

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 9.0 CRITICAL AV:N/AC:L/Au:S/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78