From 17e7a892411fc5300faa1c2967f1db425ea393c1 Mon Sep 17 00:00:00 2001
From: Fortinet PSIRT Team <psirt_team@fortinet.com>
Date: Mon, 10 Oct 2022 13:38:10 +0200
Subject: [PATCH] Commit CVE-2022-33873

---
 2022/33xxx/CVE-2022-33873.json | 78 ++++++++++++++++++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 2022/33xxx/CVE-2022-33873.json

diff --git a/2022/33xxx/CVE-2022-33873.json b/2022/33xxx/CVE-2022-33873.json
new file mode 100644
index 00000000000..b85562219f5
--- /dev/null
+++ b/2022/33xxx/CVE-2022-33873.json
@@ -0,0 +1,78 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-33873",
+        "ASSIGNER": "psirt@fortinet.com",
+        "STATE": "PUBLIC"
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "Fortinet",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Fortinet FortiTester",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "impact": {
+        "cvss": {
+            "attackComplexity": "Low",
+            "attackVector": "Physical",
+            "availabilityImpact": "High",
+            "baseScore": 6.6,
+            "baseSeverity": "Medium",
+            "confidentialityImpact": "High",
+            "integrityImpact": "High",
+            "privilegesRequired": "None",
+            "scope": "Unchanged",
+            "userInteraction": "None",
+            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C",
+            "version": "3.1"
+        }
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "Execute unauthorized code or commands"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "refsource": "CONFIRM",
+                "name": "https://fortiguard.com/psirt/FG-IR-22-237",
+                "url": "https://fortiguard.com/psirt/FG-IR-22-237"
+            }
+        ]
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Console login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to execute arbitrary command in the underlying shell."
+            }
+        ]
+    }
+}
\ No newline at end of file