← CVE Intelligence

CVE-2022-43953

Fortinet / FortiProxy PUBLISHED

Description (CNA)

A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7 allows attacker to execute unauthorized code or commands via specially crafted commands.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiProxyaffected 7.2.0 through 7.2.1; affected 7.0.0 through 7.0.7
Fortinet / FortiOSaffected 7.2.0 through 7.2.4; affected 7.0.0 through 7.0.11; affected 6.4.0 through 6.4.12; affected 6.2.0 through 6.2.15

CWE

CWE-134

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.