PT-2022-6076 · Fortinet · Fortitester

Published 2022-10-10 · Updated 2022-10-20 · CVE-2022-35844

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FortiTester versions 2.3.0 through 3.9.1 FortiTester versions 4.0.0 through 4.2.0 FortiTester versions 7.0.0 through 7.1.0

Description The issue exists due to the failure to neutralize special elements used in an OS command, allowing an authenticated attacker to execute unauthorized commands via specifically crafted arguments to commands of the certificate import feature. This can be done by exploiting the management interface of FortiTester.

Recommendations For FortiTester versions 2.3.0 through 3.9.1, update to a version outside of this range to mitigate the risk. For FortiTester versions 4.0.0 through 4.2.0, update to a version outside of this range to mitigate the risk. For FortiTester versions 7.0.0 through 7.1.0, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to the certificate import feature until a patch is available.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2023-00011

CVE-2022-35844

Affected Products

Fortitester

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-35844 · Security Note
• https://fortiguard.com/psirt/FG-IR-22-247 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35844 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00011 · Security Note
• https://t.me/cibsecurity/51683 · Telegram Post