A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiOS version 6.0.0 up to and including 6.0.14, FortiOS version 6.2.0 up to and including 6.2.10, FortiOS version 6.4.0 up to and including 6.4.8, FortiOS version 7.0.0 up to and including 7.0.3 allows malicious user to execute privileged commands on a linked FortiSwitch via diagnostic CLI commands.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
fortinet fortios |
Vulmon