Yüksek CVSS 7.2
CVE-2025-64153: Fortiextender Firmware: işletim sistemi komut enjeksiyonu
Açıklama (NVD)
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through 7.4.7, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via a specific HTTP request.
Özet bilgiler
- Ürün
- Fortinet Fortiextender Firmware
- CVSS v3.1
- 7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- %1,71 (yüzdelik 77)
- CWE
- CWE-78
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| fortinet-fortiextender-firmware | 7.0.0 | 7.0.4 | — |
| fortinet-fortiextender-firmware | 7.2.0 | 7.2.5 | — |
| fortinet-fortiextender-firmware | 7.4.0 | 7.4.7 | — |
| fortinet-fortiextender-firmware | 7.6.0 | 7.6.3 | — |