9.6
Critique
CVE-2023-37936 A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through…
Description
A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via crafted requests.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiSwitch | 7.4.0 | Pas de correctif indiqué |
| FortiSwitch 7.2 | 7.2.0 → 7.2.5 | Pas de correctif indiqué |
| FortiSwitch 7.0 | 7.0.0 → 7.0.7 | Pas de correctif indiqué |
| FortiSwitch 6.4 | 6.4.0 → 6.4.13 | Pas de correctif indiqué |
| FortiSwitch 6.2 | 6.2.0 → 6.2.7 | Pas de correctif indiqué |
| FortiSwitch 6.0 | 6.0.0 → 6.0.7 | Pas de correctif indiqué |
Autres CVE de FortiSwitch
Les 9 CVE de FortiSwitch →
CVE-2026-106175
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
2.1
Faible
CVE-2024-48887
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to…
9.3
Critique
CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
4.1
Moyenne
CVE-2023-37937
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch…
7.6
Élevée