7.6
Élevée
CVE-2023-37937 An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch…
Description
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via the FortiSwitch CLI.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiSwitch | 7.4.0 | Pas de correctif indiqué |
| FortiSwitch 7.2 | 7.2.0 → 7.2.5 | Pas de correctif indiqué |
| FortiSwitch 7.0 | 7.0.0 → 7.0.7 | Pas de correctif indiqué |
| FortiSwitch 6.4 | 6.4.0 → 6.4.13 | Pas de correctif indiqué |
| FortiSwitch 6.2 | 6.2.0 → 6.2.7 | Pas de correctif indiqué |
| FortiSwitch 6.0 | 6.0.0 → 6.0.7 | Pas de correctif indiqué |
Autres CVE de FortiSwitch
Les 9 CVE de FortiSwitch →
CVE-2026-106175
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
2.1
Faible
CVE-2024-48887
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to…
9.3
Critique
CVE-2022-23439
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
4.1
Moyenne
CVE-2023-37936
A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through…
9.6
Critique