CVE-2022-22297

EUVD-2022-27443

07.03.2023, 17:15

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWeb all versions 6.1, FortiWeb all versions 6.0, FortiRecorder version 6.4.0 through 6.4.3, FortiRecorder all versions 6.0, FortiRecorder all versions 2.7 may allow an authenticated user to read arbitrary files via specially crafted command arguments.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
fortinet	CNA	5.2 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 21%

Affected Products (NVD)

Vendor	Product	Version
fortinet	fortiweb	6.0.0 ≤ 𝑥 ≤ 6.0.8
fortinet	fortiweb	6.1.0 ≤ 𝑥 ≤ 6.1.3
fortinet	fortiweb	6.2.0 ≤ 𝑥 ≤ 6.2.7
fortinet	fortiweb	6.3.0 ≤ 𝑥 ≤ 6.3.17
fortinet	fortiweb	6.4.0 ≤ 𝑥 ≤ 6.4.3
fortinet	fortirecorder_firmware	2.7.0 ≤ 𝑥 ≤ 2.7.7
fortinet	fortirecorder_firmware	6.0.0 ≤ 𝑥 ≤ 6.0.12
fortinet	fortirecorder_firmware	6.4.0 ≤ 𝑥 ≤ 6.4.3

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-792 - Incomplete Filtering of One or More Instances of Special Elements
The software receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.

References

https://fortiguard.com/psirt/FG-IR-21-218