CVE-2022-33869
16.02.2023, 19:15
An improper neutralization of special elements used in an OS command vulnerability [CWE-78]in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortiwan | 4.0.0 ≤ 𝑥 ≤ 4.0.6 |
| fortinet | fortiwan | 4.5.0 ≤ 𝑥 < 4.5.10 |
| fortinet | fortiwan | 4.1.1 |
| fortinet | fortiwan | 4.1.2 |
| fortinet | fortiwan | 4.1.3 |
| fortinet | fortiwan | 4.2.1 |
| fortinet | fortiwan | 4.2.2 |
| fortinet | fortiwan | 4.2.5 |
| fortinet | fortiwan | 4.2.6 |
| fortinet | fortiwan | 4.2.7 |
| fortinet | fortiwan | 4.3.0 |
| fortinet | fortiwan | 4.3.1 |
| fortinet | fortiwan | 4.4.0 |
| fortinet | fortiwan | 4.4.1 |
𝑥
= Vulnerable software versions