PT-2023-1011 · Fortinet · Fortiadc

Published 2023-01-03 · Updated 2023-01-10 · CVE-2022-39947

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FortiADC versions 5.4.0 through 5.4.5 FortiADC versions 6.0.0 through 6.0.4 FortiADC versions 6.1.0 through 6.1.6 FortiADC versions 6.2.0 through 6.2.3 FortiADC versions 7.0.0 through 7.0.2

Description The issue is related to an improper neutralization of special elements used in an os command, also known as 'os command injection', which may allow an attacker to execute unauthorized code or commands via specifically crafted HTTP requests. This can be done by sending specially formed HTTP requests to the web interface of the FortiADC controller.

Recommendations For FortiADC versions 5.4.0 through 5.4.5, update to a version that contains a fix for this issue. For FortiADC versions 6.0.0 through 6.0.4, update to a version that contains a fix for this issue. For FortiADC versions 6.1.0 through 6.1.6, update to a version that contains a fix for this issue. For FortiADC versions 6.2.0 through 6.2.3, update to a version that contains a fix for this issue. For FortiADC versions 7.0.0 through 7.0.2, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the web interface of the FortiADC controller to minimize the risk of exploitation.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2023-00040

CVE-2022-39947

Affected Products

Fortiadc

References · 7

• https://fortiguard.com/psirt/FG-IR-22-061 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-39947 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00040 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-39947 · Security Note
• https://t.me/cvenotify/41204 · Telegram Post
• https://t.me/pentestingnews/31818 · Telegram Post
• https://t.me/cibsecurity/55812 · Telegram Post