high8.8
CVE-2022-33869
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may all…
Impact
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiwan | from 4.0.0 through 4.0.6 from 4.5.0 before 4.5.10 Versions 4.1.1, 4.1.2, 4.1.3, 4.2.1 |