medium6.7
CVE-2023-41842
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute unauthorized code or com…
Impact
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortianalyzer | from 6.2.0 before 7.0.10 from 7.2.0 before 7.2.4 from 7.4.0 before 7.4.2 |
| Fortinet | Fortianalyzer Big Data | from 6.4.5 through 6.4.7 from 7.0.1 through 7.0.6 from 7.2.0 before 7.2.6 Version 6.2.5 |
| Fortinet | Fortimanager | from 6.2.0 before 7.0.10 from 7.2.0 before 7.2.4 from 7.4.0 before 7.4.2 |
| Fortinet | Fortiportal | from 5.3.0 before 6.0.15 |