NetSight
high7.8

CVE-2022-39953

A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.1.0 through 9.1.8, F…

Impact

A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.1.0 through 9.1.8, FortiNAC all versions 8.8, FortiNAC all versions 8.7, FortiNAC all versions 8.6, FortiNAC all versions 8.5, FortiNAC version 8.3.7 allows attacker to escalation of privilege via specially crafted commands.

Affected products

VendorProductAffected versions
FortinetFortinac
from 8.5.0 through 8.5.4
from 8.6.0 through 8.6.5
from 8.7.0 through 8.7.6
from 8.8.0 through 8.8.11
from 9.1.0 through 9.1.8
from 9.2.0 through 9.2.6

Weakness classification

References