← CVE Intelligence

CVE-2022-39952

Fortinet / FortiNAC PUBLISHED

Description (CNA)

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiNACaffected 9.4.0; affected 9.2.0 through 9.2.5; affected 9.1.0 through 9.1.7; affected 8.8.0 through 8.8.11; affected 8.7.0 through 8.7.6; affected 8.6.0 through 8.6.5; affected 8.5.0 through 8.5.4; affected 8.3.7

CWE

CWE-73

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.