PT-2022-4969 · Fortinet · Fortiadc+3

Published 2022-01-03 · Updated 2022-08-11 · CVE-2022-22299

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiADC versions 6.0.0 through 6.2.1 FortiProxy versions 1.0.0 through 2.0.7 and 7.0.0 through 7.0.1 FortiOS versions 6.0.0 through 6.4.8 and 7.0.0 through 7.0.2 FortiMail versions 6.4.0 through 7.0.2

Description A format string vulnerability in the command line interpreter may allow an authenticated user to execute unauthorized code or commands via specially crafted command arguments. This issue is related to the use of an uncontrolled format string, which can be exploited by an attacker to execute arbitrary code.

Recommendations For FortiADC versions 6.0.0 through 6.2.1, update to a version outside of the affected range. For FortiProxy versions 1.0.0 through 2.0.7 and 7.0.0 through 7.0.1, update to a version outside of the affected range. For FortiOS versions 6.0.0 through 6.4.8 and 7.0.0 through 7.0.2, update to a version outside of the affected range. For FortiMail versions 6.4.0 through 7.0.2, update to a version outside of the affected range. As a temporary workaround, consider restricting access to the command line interpreter to minimize the risk of exploitation.

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

BDU:2022-06163

CVE-2022-22299

Affected Products

Fortiadc

Fortimail

Fortios

Fortiproxy

References · 8

• https://osv.dev/vulnerability/CVE-2022-22299 · Vendor Advisory
• https://fortiguard.com/psirt/FG-IR-21-235 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22299 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22299 · Security Note
• https://bdu.fstec.ru/vul/2022-06163 · Security Note
• https://t.me/cvenotify/34333 · Telegram Post
• https://vuldb.com/ru/?id.205754 · Note
• https://fortiguard.fortinet.com/psirt/FG-IR-21-235 · Note