NetSight
high8.8

CVE-2024-46662

A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud…

Impact

A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets

Affected products

VendorProductAffected versions
FortinetFortimanager
from 7.4.1 before 7.4.4
FortinetFortimanager Cloud
from 7.4.1 before 7.4.4

Weakness classification

References