CVE-2022-35849

published 2023-09-13

CVE-2022-35849: An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and 6.1.0 all versions may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortiadc	< 6.2.6	6.2.6
fortinet	fortiadc	—	—
fortinet	fortiadc	—	—
fortinet	fortiadc	6.1.0 – 6.1.6	—
fortinet	fortiadc	6.2.0 – 6.2.4	—
fortinet	fortiadc	>= 7.0.0 < 7.0.4	7.0.4
fortinet	fortiadc	7.0.0 – 7.0.2	—
fortinet	fortiadc	>= 7.1.0 < 7.1.2	7.1.2

CWE-78