PT-2023-4880 · Fortinet · Fortiswitchmanager

Publicado 2023-09-07 · Atualizado 2023-09-12 · CVE-2023-36635

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Fortinet FortiSwitchManager versions 7.0.0 through 7.0.1 Fortinet FortiSwitchManager versions 7.2.0 through 7.2.2

Description The issue is related to improper access control in Fortinet FortiSwitchManager, which may allow a remote authenticated read-only user to modify interface settings via the API. This can be achieved by sending commands through the application programming interface.

Recommendations For Fortinet FortiSwitchManager versions 7.0.0 through 7.0.1, consider restricting access to the API to prevent unauthorized modifications to interface settings until a patch is available. For Fortinet FortiSwitchManager versions 7.2.0 through 7.2.2, consider disabling the API functionality temporarily to minimize the risk of exploitation.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2023-05371

CVE-2023-36635

Produtos afetados

Fortiswitchmanager

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-36635 · Nota de Segurança
• https://twitter.com/cracbot/status/1700026239011164348 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-36635 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1699767676501905612 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1699795765600858430 · Publicação no Twitter
• https://fortiguard.com/psirt/FG-IR-22-174 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-05371 · Nota de Segurança
• https://t.me/cibsecurity/70068 · Publicação no Telegram