CVE-2022-26116 — Fortinet / Fortinet FortiNAC

Description (CNA)

Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.2 and below may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.

Affected (CNA)

Vendor / product	Versions
Fortinet / Fortinet FortiNAC	affected FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.2 and below.

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/psirt/FG-IR-22-062

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/psirt/FG-IR-22-062

CISA-ADP

No English description supplied.

No references supplied.