Vulnetix
Try Vulnetix Request Demo
CVE-2022-35844 PUBLISHED CVSS 6.699999809265137 MEDIUM

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to commands of the certificate import feature.

EPSS 0.34% · 56.7th percentile

Risk Scores

CVSS v3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
EPSS Score
0.34%
56.7th percentile

Affected Products

VendorProductVersions
FortinetFortinet FortiTesterFortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0
fortinetfortitester2.3.0, 4.0.0, 7.0.0

Timeline

References

Open in Interactive Console →