PT-2023-5996 · Fortinet · Fortianalyzer

Published 2023-10-10 · Updated 2023-10-13 · CVE-2023-42782

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.4.0 and below 7.2.3

Description The issue is related to insufficient verification of data authenticity, allowing a remote unauthenticated attacker to send messages to the syslog server of FortiAnalyzer via knowledge of an authorized device serial number.

Recommendations For FortiAnalyzer versions 7.4.0 and below 7.2.3, consider restricting access to the syslog server to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the device serial number to authenticate messages to the syslog server until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

BDU:2023-06697

CVE-2023-42782

Affected Products

Fortianalyzer

References · 6

• https://fortiguard.com/psirt/FG-IR-23-221 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-42782 · Security Note
• https://bdu.fstec.ru/vul/2023-06697 · Security Note
• https://osv.dev/vulnerability/CVE-2023-42782 · Vendor Advisory
• https://t.me/cibsecurity/71979 · Telegram Post
• https://t.me/cvenotify/59194 · Telegram Post