PT-2023-8536 · Fortinet · Fortisiem

Published

2023-10-02

·

Updated

2025-04-21

·

CVE-2024-23109

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Fortinet FortiSIEM versions 6.4.0 through 6.4.2 Fortinet FortiSIEM versions 6.5.0 through 6.5.2 Fortinet FortiSIEM versions 6.6.0 through 6.6.3 Fortinet FortiSIEM versions 6.7.0 through 6.7.8 Fortinet FortiSIEM versions 7.0.0 through 7.0.2 Fortinet FortiSIEM versions 7.1.0 through 7.1.1
Description The issue is related to an improper neutralization of special elements used in an os command, which allows an attacker to execute unauthorized code or commands via crafted API requests. This can enable an unauthenticated remote attacker to execute arbitrary commands on the affected system.
Recommendations For Fortinet FortiSIEM versions 6.4.0 through 6.4.2, update to a version that contains a fix for this issue. For Fortinet FortiSIEM versions 6.5.0 through 6.5.2, update to a version that contains a fix for this issue. For Fortinet FortiSIEM versions 6.6.0 through 6.6.3, update to a version that contains a fix for this issue. For Fortinet FortiSIEM versions 6.7.0 through 6.7.8, update to a version that contains a fix for this issue. For Fortinet FortiSIEM versions 7.0.0 through 7.0.2, update to a version that contains a fix for this issue. For Fortinet FortiSIEM versions 7.1.0 through 7.1.1, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to crafted API requests until a patch is available.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-01127
CVE-2024-23109

Affected Products

Fortisiem