PT-2023-7755 · Fortinet · Fortiwan

Published 2023-11-14 · Updated 2023-12-18 · CVE-2023-44251

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiWAN versions 5.1.1 through 5.1.2 FortiWAN versions 5.2.0 through 5.2.1

Description The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'path traversal' vulnerability. This may allow an authenticated attacker to read and delete arbitrary files of the system via crafted HTTP or HTTPS requests. The vulnerability can be exploited by sending specially crafted requests, potentially allowing the attacker to access, modify, or delete data and execute arbitrary commands.

Recommendations For FortiWAN versions 5.1.1 through 5.1.2, consider restricting access to the system until a patch is available. For FortiWAN versions 5.2.0 through 5.2.1, consider disabling the ability to send crafted HTTP or HTTPS requests to minimize the risk of exploitation. As a temporary workaround, consider limiting the access to the system and monitoring the traffic to detect potential exploitation attempts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2023-08822

CVE-2023-44251

Affected Products

Fortiwan

References · 8

• https://osv.dev/vulnerability/CVE-2023-44251 · Vendor Advisory
• https://fortiguard.com/psirt/FG-IR-23-265 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-44251 · Security Note
• https://bdu.fstec.ru/vul/2023-08822 · Security Note
• https://twitter.com/VulmonFeeds/status/1734901100472344657 · Twitter Post
• https://twitter.com/CVEnew/status/1734864682043748358 · Twitter Post
• https://t.me/cvenotify/63421 · Telegram Post
• https://t.me/cvenotify/63939 · Telegram Post