← CVE Intelligence

CVE-2024-45325

Fortinet / FortiDDoS-F PUBLISHED

Description (CNA)

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiDDoS-Faffected 7.0.0 through 7.0.2; affected 6.6.0 through 6.6.3; affected 6.5.0 through 6.5.1; affected 6.4.0 through 6.4.2; affected 6.3.0 through 6.3.5; affected 6.2.0 through 6.2.3; affected 6.1.0 through 6.1.5

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.