CVE-2024-23109

CVSS 9.7 CRITICALEPSS 3.2%CWE-78

Vexday Risk Score

28Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.7EPSS 3.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

05 Feb 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:X/RC:X

Affected products

Fortinet · FortiSIEM

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://fortiguard.com/psirt/FG-IR-23-130