CVE-2024-33508

7.3HIGH

An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthen

Publicado: 9/10/2024Actualizado: 9/20/2024
Ver en NVDVer en MITRE

Descripción

An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthenticated attacker to execute limited and temporary operations on the underlying database via crafted requests.

Análisis IAImpulsado por IA

Productos Afectados

fortinetforticlient_enterprise_management_server
fortinetforticlient_enterprise_management_server

Referencias