Yüksek CVSS 8.8
CVE-2023-47534: Forticlient Endpoint Management Server: güvenlik açığı
Açıklama (NVD)
A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets.
Özet bilgiler
- Ürün
- Fortinet Forticlient Endpoint Management Server
- CVSS v3.1
- 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %1,05 (yüzdelik 64)
- CWE
- CWE-1236
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| fortinet-forticlient-endpoint-management-server | 6.0.0 | 6.0.8 | — |
| fortinet-forticlient-endpoint-management-server | 6.2.0 | 6.2.9 | — |
| fortinet-forticlient-endpoint-management-server | 6.4.0 | 6.4.9 | — |
| fortinet-forticlient-endpoint-management-server | 7.0.0 | 7.0.10 | — |
| fortinet-forticlient-endpoint-management-server | 7.2.0 | 7.2.2 | — |