PT-2024-5556 · Fortinet · Fortiaiops

Published 2024-07-09 · Updated 2026-01-09 · CVE-2024-27785

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions FortiAIOps version 2.0.0

Description The issue is related to an improper neutralization of formula elements in a CSV file, which may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports. This can be achieved by sending specially crafted CSV files.

Recommendations For FortiAIOps version 2.0.0, consider disabling the import of CSV files or restricting access to the feature that allows the execution of commands via CSV reports until a patch is available. As a temporary workaround, avoid using the CSV export feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-1236

Related Identifiers

BDU:2024-06235

CVE-2024-27785

Affected Products

Fortiaiops

References · 8

• https://fortiguard.fortinet.com/psirt/FG-IR-24-073 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-27785 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06235 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-27785 · Security Note
• https://t.me/cvedetector/373 · Telegram Post
• https://twitter.com/CVEnew/status/1810700133299782048 · Twitter Post
• https://t.me/cvenotify/93836 · Telegram Post
• https://t.me/cveNotify/148247 · Telegram Post