PT-2023-1417 · Fortinet · Fortinac

Published

2023-02-16

·

Updated

2023-09-18

·

CVE-2022-39952

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions FortiNAC versions 8.3.7, 8.5.0 through 8.5.4, 8.6.0 through 8.6.5, 8.7.0 through 8.7.6, 8.8.0 through 8.8.11, 9.1.0 through 9.1.7, 9.2.0 through 9.2.5, 9.4.0
Description The issue is related to incorrect external control of file name or path in the keyUpload component of Fortinet FortiNAC. This can be exploited by an unauthenticated attacker to execute unauthorized code or commands via a specifically crafted HTTP request. The vulnerability allows an attacker to write arbitrary files to the system, resulting in remote code execution from the root.
Recommendations For FortiNAC versions 8.3.7, 8.5.0 through 8.5.4, 8.6.0 through 8.6.5, 8.7.0 through 8.7.6, 8.8.0 through 8.8.11, 9.1.0 through 9.1.7, 9.2.0 through 9.2.5, 9.4.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-73CWE-668

Related Identifiers

BDU:2023-00805
CVE-2022-39952

Affected Products

Fortinac