CVE-2022-22298
published 2023-10-10CVE-2022-22298: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIsolator version…
PriorityP348high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.46%
36.6th percentile
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIsolator version 1.1.0, FortiIsolator version 1.2.0 through 1.2.2, FortiIsolator version 2.0.0 through 2.0.1, FortiIsolator version 2.1.0 through 2.1.2, FortiIsolator version 2.2.0, FortiIsolator version 2.3.0 through 2.3.4 allows attacker to execute arbitrary OS commands in the underlying shell via specially crafted input parameters.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | — | — |
| fortinet | fortiisolator | 1.2.0 – 1.2.2 | — |
| fortinet | fortiisolator | 2.0.0 – 2.0.1 | — |
| fortinet | fortiisolator | 2.1.0 – 2.1.2 | — |
| fortinet | fortiisolator | 2.3.0 – 2.3.4 | — |
| fortinet | fortinet | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x3m3-jmrv-xc5r: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1
ghsa_unreviewed·2023-10-10
CVE-2022-22298 [HIGH] CWE-78 GHSA-x3m3-jmrv-xc5r: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIsolator version 1.1.0, FortiIsolator version 1.2.0 through 1.2.2, FortiIsolator version 2.0.0 through 2.0.1, FortiIsolator version 2.1.0 through 2.1.2, FortiIsolator version 2.2.0, FortiIsolator version 2.3.0 through 2.3.4 allows attacker to execute arbitrary OS commands in the underlying shell via specially crafted input parameters.
Fortinet
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator v...
vendor_fortinet·2023-10-10·CVSS 6.7
CVE-2022-22298 [MEDIUM] CWE-78 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator v...
FG-IR-21-233: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator v...
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIsolator version 1.1.0, FortiIsolator version 1.2.0 through 1.2.2, FortiIsolator version 2.0.0 through 2.0.1, FortiIsolator version 2.1.0 through 2.1.2, FortiIsolator version 2.2.0, FortiIsolator version 2.3.0 through 2.3.4 allows attacker to execute arbitrary OS commands in the underlying shell via specially crafted input parameters.
CVEs: CVE-2022-22298
CWEs: CWE-78
CVSS: 6.7 (medium)
Affected products: FortiIsolator, Fortinet
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-10-10
Published