medium6.7
CVE-2023-40721
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or comman…
Impact
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or commands via specially crafted requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortios | from 6.2.0 before 7.0.14 from 7.2.0 before 7.2.7 Version 7.4.0 |
| Fortinet | Fortiswitchmanager | from 7.0.0 before 7.0.3 from 7.2.0 before 7.2.3 |
| Fortinet | Fortiproxy | from 1.2.0 before 7.0.15 from 7.2.0 before 7.2.8 Version 7.4.0 |
| Fortinet | Fortipam | from 1.0.0 before 1.2.0 |