2023-02-20 16:00:34 +00:00
{
2023-06-13 09:00:43 +00:00
"data_version" : "4.0" ,
2023-02-20 16:00:34 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"CVE_data_meta" : {
"ID" : "CVE-2023-26210" ,
2023-06-13 09:00:43 +00:00
"ASSIGNER" : "psirt@fortinet.com" ,
"STATE" : "PUBLIC"
2023-02-20 16:00:34 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2023-06-13 09:00:43 +00:00
"value" : "Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] in Fortinet FortiADCManager version 7.1.0 and before 7.0.0, FortiADC version 7.2.0 and before 7.1.2 allows a local authenticated attacker to execute arbitrary shell code as `root` user via crafted CLI requests."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "Execute unauthorized code or commands" ,
"cweId" : "CWE-78"
}
]
}
]
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "Fortinet" ,
"product" : {
"product_data" : [
{
"product_name" : "FortiADCManager" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "7.1.0"
} ,
{
"version_affected" : "=" ,
"version_value" : "7.0.0"
} ,
{
"version_affected" : "<=" ,
"version_name" : "6.2.0" ,
"version_value" : "6.2.1"
} ,
{
"version_affected" : "=" ,
"version_value" : "6.1.0"
} ,
{
"version_affected" : "=" ,
"version_value" : "6.0.0"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.4.0"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.3.0"
} ,
{
"version_affected" : "<=" ,
"version_name" : "5.2.0" ,
"version_value" : "5.2.1"
}
]
}
} ,
{
"product_name" : "FortiADC" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "7.2.0"
} ,
{
"version_affected" : "<=" ,
"version_name" : "7.1.0" ,
"version_value" : "7.1.1"
} ,
{
"version_affected" : "<=" ,
"version_name" : "7.0.0" ,
"version_value" : "7.0.5"
} ,
{
"version_affected" : "<=" ,
"version_name" : "6.2.0" ,
"version_value" : "6.2.6"
} ,
{
"version_affected" : "<=" ,
"version_name" : "6.1.0" ,
"version_value" : "6.1.6"
} ,
{
"version_affected" : "<=" ,
"version_name" : "6.0.0" ,
"version_value" : "6.0.4"
} ,
{
"version_affected" : "<=" ,
"version_name" : "5.4.0" ,
"version_value" : "5.4.5"
} ,
{
"version_affected" : "<=" ,
"version_name" : "5.3.0" ,
"version_value" : "5.3.7"
} ,
{
"version_affected" : "<=" ,
"version_name" : "5.2.0" ,
"version_value" : "5.2.8"
}
]
}
}
]
}
}
]
}
} ,
"references" : {
"reference_data" : [
{
"url" : "https://fortiguard.com/psirt/FG-IR-23-076" ,
"refsource" : "MISC" ,
"name" : "https://fortiguard.com/psirt/FG-IR-23-076"
}
]
} ,
"solution" : [
{
"lang" : "en" ,
"value" : "Please upgrade to FortiADC version 7.2.1 or above\r\nPlease upgrade to FortiADC version 7.1.3 or above\r\nPlease upgrade to FortiADCManager version 7.2.0 or above\r\nPlease upgrade to FortiADCManager version 7.1.1 or above\r\nPlease upgrade to FortiADCManager version 7.0.1 or above"
}
] ,
"impact" : {
"cvss" : [
{
"version" : "3.1" ,
"attackComplexity" : "LOW" ,
"attackVector" : "LOCAL" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"privilegesRequired" : "LOW" ,
"scope" : "UNCHANGED" ,
"userInteraction" : "NONE" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:C"
2023-02-20 16:00:34 +00:00
}
]
}
}
